From 92c5894f99e454e8ed7b3cece6a294ee56b801ca Mon Sep 17 00:00:00 2001
From: Tim Carr <tim@n7studios.co.uk>
Date: Tue, 8 Sep 2026 20:13:43 +0800
Subject: [PATCH] Escape Site ID

---
 fathom-analytics.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fathom-analytics.php b/fathom-analytics.php
index cd6696b..5736323 100644
--- a/fathom-analytics.php
+++ b/fathom-analytics.php
@@ -116,7 +116,7 @@ function fathom_enqueue_js_snippet()
 function fathom_add_data_attributes_to_js_script( $tag, $handle, $src )
 {
     if ( 'fathom-snippet' === $handle ) {
-        $attributes = ' data-site="' . fathom_get_site_id() . '"  ' . exclude_fathom_script_from_cookiebot();
+        $attributes = ' data-site="' . esc_attr( fathom_get_site_id() ) . '"  ' . exclude_fathom_script_from_cookiebot();
 
         if ( get_option( FATHOM_IGNORE_CANONICAL ) ) {
             $attributes .= ' data-canonical="false"';