Protection from object injection in cart

https://github.com/opencart/opencart/issues/1534