File: /home/sps/www/wp-content/plugins/nextgen-gallery/templates/AttachToPost/display_settings_form.php
<form rel="<?php echo esc_attr( $display_type_name ); ?>"
class="<?php echo esc_attr( $css_class ); ?>"
method='POST'
action='<?php echo esc_attr( isset( $_SERVER['REQUEST_URI'] ) ? wp_unslash( $_SERVER['REQUEST_URI'] ) : '' ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized ?>'
data-defaults="<?php print esc_attr( wp_json_encode( $defaults ) ); ?>">
<?php
// phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Content is generated by internal form renderer
echo $settings;
?>
</form>