Variables read from style.cfg etc. should be htmlspecialchared

http://tracker.phpbb.com/browse/PHPBB3-12202