escape attribute

Automattic · May 2, 2024 · c154830 · c154830
1 parent 96191d2
commit c154830
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/projects/plugins/jetpack/modules/videopress/class.videopress-player.php b/projects/plugins/jetpack/modules/videopress/class.videopress-player.php
@@ -338,7 +338,7 @@ private function html5_static() {
 		if ( isset( $this->options['autoplay'] ) && $this->options['autoplay'] === true ) {
 			$html .= ' autoplay="true"';
 		} else {
-			$html .= ' preload="' . $preload . '"';
+			$html .= ' preload="' . esc_attr( $preload ) . '"';
 		}
 		if ( isset( $this->video->text_direction ) ) {
 			$html .= ' dir="' . esc_attr( $this->video->text_direction ) . '"';