simplcommerce#943 fixed xss (simplcommerce#944)

Author: thiennn

src/Modules/SimplCommerce.Module.Catalog/Areas/Catalog/ViewModels/SearchOption.cs

@@ -73,6 +73,7 @@ public IList<string> GetCategories()
         public string ToJson()
         {
             var jsonSetting = new JsonSerializerSettings { ContractResolver = new CamelCasePropertyNamesContractResolver() };
+            jsonSetting.StringEscapeHandling = StringEscapeHandling.EscapeHtml;
             return JsonConvert.SerializeObject(this, jsonSetting);
         }
     }