Ticket/10744 Prevent installing styles with reserved names

https://tracker.phpbb.com/browse/PHPBB3-10744
the list is completely embedded in the code, so do we really need to call htmlspecialchars() ?