wordpress-plugin
wordpress-plugin copied to clipboard
Fix missing escaping in media.php
During a VIP review I found 4 unescaped variables embedded in double quoted strings, e.g. echo "$variable";. This should be avoided as it's not possible to escape inline this way. This PR fixes those 4 unescaped variables embedded in 2 strings via esc_attr