fix(module:select): fix XSS vulnerabilities

[yangjunhan]

close #6209

PR Checklist

Please check if your PR fulfills the following requirements:

• The commit message follows our guidelines: https://github.com/NG-ZORRO/ng-zorro-antd/blob/master/CONTRIBUTING.md#commit
• Tests for the changes have been added (for bug fixes / features)
• Docs have been added / updated (for bug fixes / features)

PR Type

What kind of change does this PR introduce?

[x] Bugfix
[ ] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Build related changes
[ ] CI related changes
[ ] Documentation content changes
[ ] Application (the showcase website) / infrastructure changes
[ ] Other... Please describe:

What is the current behavior?

Issue Number: #6209

What is the new behavior?

Does this PR introduce a breaking change?

[ ] Yes
[x] No

Other information

[zorro-bot]

This preview will be available after the AzureCI is passed.

[codecov]

Codecov Report

Merging #6222 (b100d94) into master (47a03e5) will decrease coverage by 0.01%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##           master    #6222      +/-   ##
==========================================
- Coverage   89.86%   89.84%   -0.02%     
==========================================
  Files         477      477              
  Lines       15170    15170              
  Branches     2296     2296              
==========================================
- Hits        13632    13630       -2     
- Misses        943      944       +1     
- Partials      595      596       +1     

Impacted Files	Coverage Δ
components/select/select-search.component.ts	87.23% <100.00%> (ø)
components/tabs/tab-nav-bar.component.ts	82.39% <0.00%> (-0.71%)	⬇️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 47a03e5...b100d94. Read the comment docs.

[tyzh]

mirrorDOM.innerHTML = this.renderer.createText(${inputDOM.value} );
the result of createText is an object, so this code will cause the innerHTML of mirrorDOM is '[object Text]'

createText方法的返回结果是一个对象，这样赋值会导致mirrorDOM元素的innerHTML为 [object Text]