sanitize custom CSS for images in popups