Merge pull request #10 from pronamic/9-error-exceptionnotescaped-in-c…

…urrencyphp-line-96

Escape `$alphabetic_code` in exception message

src/Currency.php

@@ -93,7 +93,7 @@ final public function set_alphabetic_code( $alphabetic_code ) {
 			throw new \InvalidArgumentException(
 				\sprintf(
 					'The alphabetical code of a currency must consist of 3 characters: %s.',
-					$alphabetic_code
+					\esc_html( $alphabetic_code )
 				)
 			);
 		}