Escape outputs

assets/js/admin/editor-lang.php

@@ -32,27 +32,27 @@ $raw = apply_filters(
 	'sportspress_tinymce_strings',
 	array(
 		'shortcodes'  => $shortcodes,
-		'insert'      => __( 'SportsPress Shortcodes', 'sportspress' ),
-		'auto'        => __( 'Auto', 'sportspress' ),
-		'manual'      => __( 'Manual', 'sportspress' ),
-		'select'      => __( 'Select...', 'sportspress' ),
-		'event'       => __( 'Event', 'sportspress' ),
-		'details'     => __( 'Details', 'sportspress' ),
-		'results'     => __( 'Results', 'sportspress' ),
-		'countdown'   => __( 'Countdown', 'sportspress' ),
-		'performance' => __( 'Box Score', 'sportspress' ),
-		'venue'       => __( 'Venue', 'sportspress' ),
-		'officials'   => __( 'Officials', 'sportspress' ),
-		'teams'       => __( 'Teams', 'sportspress' ),
-		'full'        => __( 'Full Info', 'sportspress' ),
-		'calendar'    => __( 'Calendar', 'sportspress' ),
-		'statistics'  => __( 'Statistics', 'sportspress' ),
-		'team'        => __( 'Team', 'sportspress' ),
-		'standings'   => __( 'League Table', 'sportspress' ),
-		'player'      => __( 'Player', 'sportspress' ),
-		'list'        => __( 'List', 'sportspress' ),
-		'blocks'      => __( 'Blocks', 'sportspress' ),
-		'gallery'     => __( 'Gallery', 'sportspress' ),
+		'insert'      => esc_attr__( 'SportsPress Shortcodes', 'sportspress' ),
+		'auto'        => esc_attr__( 'Auto', 'sportspress' ),
+		'manual'      => esc_attr__( 'Manual', 'sportspress' ),
+		'select'      => esc_attr__( 'Select...', 'sportspress' ),
+		'event'       => esc_attr__( 'Event', 'sportspress' ),
+		'details'     => esc_attr__( 'Details', 'sportspress' ),
+		'results'     => esc_attr__( 'Results', 'sportspress' ),
+		'countdown'   => esc_attr__( 'Countdown', 'sportspress' ),
+		'performance' => esc_attr__( 'Box Score', 'sportspress' ),
+		'venue'       => esc_attr__( 'Venue', 'sportspress' ),
+		'officials'   => esc_attr__( 'Officials', 'sportspress' ),
+		'teams'       => esc_attr__( 'Teams', 'sportspress' ),
+		'full'        => esc_attr__( 'Full Info', 'sportspress' ),
+		'calendar'    => esc_attr__( 'Calendar', 'sportspress' ),
+		'statistics'  => esc_attr__( 'Statistics', 'sportspress' ),
+		'team'        => esc_attr__( 'Team', 'sportspress' ),
+		'standings'   => esc_attr__( 'League Table', 'sportspress' ),
+		'player'      => esc_attr__( 'Player', 'sportspress' ),
+		'list'        => esc_attr__( 'List', 'sportspress' ),
+		'blocks'      => esc_attr__( 'Blocks', 'sportspress' ),
+		'gallery'     => esc_attr__( 'Gallery', 'sportspress' ),
 	)
 );