Prevent cross site scripting

[girishpanchal30]

All Submissions:

• Have you followed the Optimole Contributing guideline?
• Does your code follow the WordPress' coding standards?
• Have you checked to ensure there aren't other open Pull Requests for the same update/change?

Changes proposed in this Pull Request:

Escaped the srcset and url.

Closes https://github.com/Codeinwp/optimole-service/issues/1687

Other information:

• Have you added an explanation of what your changes do and why you'd like us to include them?
• Have you written new tests for your changes, as applicable?
• Have you successfully ran tests with your changes locally?

[pirate-bot]

Plugin build for c5045e2 is ready 🛎️!

• Download build
• Download dev

[Copilot]

Pull request overview

This PR aims to prevent XSS vectors in generated <img> tags by escaping dynamically generated srcset entries.

Changes:

• Escape generated srcset URLs via esc_url().
• Escape srcset descriptors via esc_attr().

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.