Merge pull request #30 from voceconnect/output_escaping_VIP_request_4…

…2208

Escape final meta tag values before output.

voce-seo.php

@@ -1,7 +1,7 @@
 <?php
 /*
   Plugin Name: Voce SEO
-  Version: 0.5.2
+  Version: 0.5.3
   Plugin URI: http://voceconnect.com/
   Description: An SEO plugin taking things from both WP SEO and All in One SEO but leaving out the VIP incompatible pieces.
   Author: Voce Platforms
@@ -253,7 +253,7 @@ public static function output_meta_objects_html( $meta_objects = array() ) {
 			if ( $element && $attributes && is_array($attributes) ) {
 
 				foreach( $attributes as $att => $value ) {
-					$atts_string .= sprintf( '%s="%s" ', $att, $value );
+					$atts_string .= sprintf( '%s="%s" ', $att, esc_attr( $value ) );
 				}
 
 				$html .= sprintf( '<%s %s/>' . PHP_EOL, $element, $atts_string );