Wordpress features `esc_attr()`, so use it to escape shortcode arguments.
Wordpress features
esc_attr(), so use it to escape shortcode arguments.