> %s', bayleaf_get_icon( [ 'icon' => 'folder' ] ) ); // WPCS xss ok. 'bayleaf_get_icon' returns escaped value. } echo $bayleaf_categories_list; // WPCS xss ok. Contains HTML, other values escaped. ?>