Encode values passed to `add_query_arg`
VIP recommends checking the WordPress Codex when using an unfamiliar or less frequently used function. The usage description and user-supplied notes can help show “gotchas”, identify possible unexpected results, or clarify whether the function returns output-safe results or if further escaping is needed.