Protect against font family innerHTML/cssText attacks.