[innerHTML] rip off script tag?

[infoproducts]

You need to bypass html sanitization.
Take a look at: Inserting HTML via Angular 2: Use of DomSanitizationService & bypassSecurityTrustHtml