Those settings allow any admin to add some custom items to the user menu and to the theme menu.

Right now the menu items introduced by the user are not validated so this may lead to unexpected results (see screenshots in MDL-57410), the only way to fix this would be to create a new admin setting specific for this kind of settings with some type of regexp validation.