From c16fa7c73d5c29a905d5f590368f270eaecb9b34 Mon Sep 17 00:00:00 2001
From: whyisjake <whyisjake@git.wordpress.org>
Date: Wed, 29 Apr 2020 15:36:06 +0000
Subject: [PATCH] Cache API: Ensure proper escaping around the stats method in
 the cache API.

Props: nickdaugherty, batmoo, whyisjake, westi.

Built from https://develop.svn.wordpress.org/trunk@47637


git-svn-id: http://core.svn.wordpress.org/trunk@47412 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-includes/class-wp-object-cache.php | 2 +-
 wp-includes/version.php               | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/wp-includes/class-wp-object-cache.php b/wp-includes/class-wp-object-cache.php
index fafdc8b9e5..428e453631 100644
--- a/wp-includes/class-wp-object-cache.php
+++ b/wp-includes/class-wp-object-cache.php
@@ -441,7 +441,7 @@ class WP_Object_Cache {
 		echo '</p>';
 		echo '<ul>';
 		foreach ( $this->cache as $group => $cache ) {
-			echo "<li><strong>Group:</strong> $group - ( " . number_format( strlen( serialize( $cache ) ) / KB_IN_BYTES, 2 ) . 'k )</li>';
+			echo '<li><strong>Group:</strong> ' . esc_html( $group ) . ' - ( ' . number_format( strlen( serialize( $cache ) ) / KB_IN_BYTES, 2 ) . 'k )</li>';
 		}
 		echo '</ul>';
 	}
diff --git a/wp-includes/version.php b/wp-includes/version.php
index 2c13d9bd8a..e6fc51d75e 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -13,7 +13,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '5.5-alpha-47636';
+$wp_version = '5.5-alpha-47637';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.