Escaping issues
mikeyarce opened this issue · comments
Mikey Arce commented
There are two instances of values from the Database needing to be escaped:
https://github.com/Ayesh/WordPress-oEmbed-Facebook-Instagram/blob/master/src/Settings.php#L64
https://github.com/Ayesh/WordPress-oEmbed-Facebook-Instagram/blob/master/src/Settings.php#L68
I would wrap esc_attr()
around the option.