Fix object injection vulnerability in cart