@danielbachhuber is it necessary to pass data through `esc_attr` and `esc_url` for a `src` attribute?