Fixed a bypass from @insertScript
Added prop() API sanitation
Refactored the code