Fixed js injection possibility in form for product search.