Escape the strings

Author: Marco Pereirinha

php/class-special-offer.php

@@ -75,8 +75,8 @@ public function filtered_settings( $settings ) {
 					'url'     => static function () {
 						$args = array(
 							'tf_360017815680' => 'help_with_plans',
-							'tf_subject'      => __( 'Request to Purchase the Small Plan', 'cloudinary' ),
-							'tf_description'  => __( "Hello,<br><br>I'm interested in purchasing the Small plan for $29. Could you please provide me with the next steps to complete the purchase?<br><br>Thank you!", 'cloudinary' ),
+							'tf_subject'      => esc_attr( __( 'Request to Purchase the Small Plan', 'cloudinary' ) ),
+							'tf_description'  => esc_attr( __( "Hello,<br><br>I'm interested in purchasing the Small plan for $29. Could you please provide me with the next steps to complete the purchase?<br><br>Thank you!", 'cloudinary' ) ),
 						);
 						return Utils::get_support_link( $args );
 					},

php/class-utils.php

@@ -463,12 +463,14 @@ public static function get_support_link( $args = array() ) {
 			'tf_22246877'                  => $user->display_name,
 			'tf_360007219560'              => $plugin->components['connect']->get_cloud_name(),
 			'tf_360017815680'              => 'other_help_needed',
-			'tf_subject'                   => sprintf(
-				// translators: The plugin version.
-				__( 'I need help with Cloudinary WordPress plugin version %s', 'cloudinary' ),
-				$plugin->version
+			'tf_subject'                   => esc_attr(
+				sprintf(
+					// translators: The plugin version.
+					__( 'I need help with Cloudinary WordPress plugin version %s', 'cloudinary' ),
+					$plugin->version
+				)
 			),
-			'tf_description'  => __( 'Please, provide more details on your request, and if possible, attach a System Report', 'cloudinary' ),
+			'tf_description'  => esc_attr( __( 'Please, provide more details on your request, and if possible, attach a System Report', 'cloudinary' ) ),
 		);
 
 		$args = wp_parse_args(