Can we escape these with `esc_attr()`?