`$property` should be escaped with `esc_attr()`