Sanitize settings before document.write.
Merge pull request #21 from duckduckgo/yegg/xss-fix

Sanitize settings before document.write.