Prevent XSS privilege escalation in custom theme settings.