Describe the bug

The TOTP URL inside the #two-factor-qr-code paragraph in the User Profile is not rendered:

This happens because esc_url() returns an empty string if it cannot recognize the protocol.

Steps to Reproduce

1. Log in.
2. Got to /wp-admin/profile.php
3. Check the link around the QR code under the "Please scan the QR code or manually copy the shared secret key from below to your Authenticator app:" label.

Screenshots, screen recording, code snippet

See above.

Environment information

The default installation of WP 6.9.1 with the Two Factor plugin installed.

Please confirm that you have searched existing issues in this repository.

Yes

Please confirm that you have tested with all plugins deactivated except Two-Factor.

Yes