Description
Two lines output data without running it through a WordPress escaping function. This is a security requirement for WordPress.org submission.
Affected lines
- Line 53: Output of
__() (translation function) — wrap with esc_html() or esc_attr() depending on context
- Line 54: Output of
$id — wrap with esc_html( $id ) or sanitize_key( $id )
Reference
WordPress Escaping Functions
PHPCS rule
WordPress.Security.EscapeOutput.OutputNotEscaped
Description
Two lines output data without running it through a WordPress escaping function. This is a security requirement for WordPress.org submission.
Affected lines
__()(translation function) — wrap withesc_html()oresc_attr()depending on context$id— wrap withesc_html( $id )orsanitize_key( $id )Reference
WordPress Escaping Functions
PHPCS rule
WordPress.Security.EscapeOutput.OutputNotEscaped