Wordfence reports

[picandocodigo]

A quick update with a couple of small things to avoid security scares, and potentially a fix for something reported on the forum (I couldn't reproduce the issue). @klemens-st let me know what you think, but no pressure.

[klemens-st]

Hi, I left some comments which make the implementation more consistent with what's already elsewhere in the code. Otherwise, if the reported vulnerability is about the script tag only, it should be good.

[picandocodigo]

Thanks @klemens-st!!!! Thanks for reminding me about that util function and how the other thing had been solved previously. I need to review the entire codebase again soon to remember what's there 😅

The main thing is the script "vulnerability", but the thumbnail one has also been reported by Wordfence and Patchstack, so I wanted to get this out as soon as possible. I don't remember what the timings were, but I'd rather avoid panic. Thanks again!