Even

Do I need to escape get_theme_mod('url') / ('mail') with esc_url?

Do I need to escape get_theme_mod('url') / ('mail') with esc_url?

Yes, you do. Even if you have sanitised the value when saving it, you should always escape on output.

Permalink Wordpress Permalink Issue for media permalink leading to 404 page when set as postname
Wordpress Permalink Issue for media permalink leading to 404 page when set as postname
How do I fix a permalink issue in WordPress? How do I change the media Permalink in WordPress? How do I change permalinks in WordPress without breakin...
Categories Categories and posts structure
Categories and posts structure
What are post categories? What is the difference between tags and categories? How many categories should a blog post have? How many types of categorie...
Rest Is it good practice to use REST API in wp-admin plugin page? [closed]
Is it good practice to use REST API in wp-admin plugin page? [closed]
Should I disable REST API? Should I disable WordPress REST API? Should I disable WP JSON? What is WordPress REST API used for? How do I block REST API...