Even though `$section` is defined right above, it should be escaped. I think `wp_kses()` should work here.