prevention against acidentally XSS'ing yourself through stupid setting values