Fix small CS issues
Change esc_attr to esc_html
Skip escaping args inside of add_query_arg, since it does escaping already
Better sanitizing input var
Merge pull request #46 from x-team/cs-fixes

Add some PHP_CodeSniffer fixes