diff --git a/src/app/admin/theme/page.tsx b/src/app/admin/theme/page.tsx
index 7444c580..5651173a 100644
--- a/src/app/admin/theme/page.tsx
+++ b/src/app/admin/theme/page.tsx
@@ -87,6 +87,7 @@ function colorFields(
       {fields.map((f) => {
         const val = toHex(current[f.key], f.def);
         const bgKey = f.bgKey ? `${f.bgKey}${suffix}` : undefined;
+        // eslint-disable-next-line security/detect-object-injection -- bgKey derived from hardcoded field list
         const bgValue = bgKey ? toHex(current[bgKey], "") : undefined;
         return (
           <ColorField
@@ -178,7 +179,6 @@ export default async function AdminTheme({
                         width: 14,
                         height: 14,
                         borderRadius: 3,
-                        // eslint-disable-next-line security/detect-object-injection -- k from hardcoded array
                         background: palette.light[k as keyof typeof palette.light],
                         boxShadow: "inset 0 0 0 1px rgba(0,0,0,0.15)",
                         marginLeft: -3,