- $content = sprintf( $set_thumbnail_link, $upload_iframe_src, $thumbnail_html );
- $content .= '<p class="hide-if-no-js"><a href="#" id="remove-post-thumbnail" onclick="WPRemoveThumbnail(\'' . $ajax_nonce . '\');return false;">' . esc_html__( 'Remove featured image' ) . '</a></p>';
+ $content = sprintf( $set_thumbnail_link,
+ esc_attr( $post_type_object->labels->set_featured_image ),
+ esc_url( $upload_iframe_src ),
+ $thumbnail_html
+ );
+ $content .= '<p class="hide-if-no-js"><a href="#" id="remove-post-thumbnail" onclick="WPRemoveThumbnail(\'' . $ajax_nonce . '\');return false;">' . esc_html( $post_type_object->labels->remove_featured_image ) . '</a></p>';