fix: prevent cross site scripting

Author: girishpanchal30

inc/tag_replacer.php

@@ -504,7 +504,7 @@ public function add_missing_srcset_attributes( $tag, $missing_srcsets, $new_url,
 			$optimized_url = $this->change_url_for_size( $new_url, $width, $height, $dpr );
 
 			if ( $optimized_url ) {
-				$new_srcset_entries[] = $optimized_url . ' ' . $descriptor;
+				$new_srcset_entries[] = esc_url( $optimized_url ) . ' ' . esc_attr( $descriptor );
 
 				// Add sizes attribute entry for responsive breakpoints
 				if ( $breakpoint > 0 ) {