Ensuring that scripts cannot be executed via toastr title or message parameters.