Fix #189 VideoJS XSS in Themes