Changeset 47637

Timestamp:

04/29/2020 03:34:55 PM (4 years ago)

Author:

whyisjake

Message:

Cache API: Ensure proper escaping around the stats method in the cache API.

Props: nickdaugherty, batmoo, whyisjake, westi.

File:

• trunk/src/wp-includes/class-wp-object-cache.php (modified) (1 diff)

trunk/src/wp-includes/class-wp-object-cache.php

@@ -442 +442 @@
         echo '<ul>';
         foreach ( $this->cache as $group => $cache ) {
-            echo "<li><strong>Group:</strong> $group - ( " . number_format( strlen( serialize( $cache ) ) / KB_IN_BYTES, 2 ) . 'k )</li>';
+            echo '<li><strong>Group:</strong> ' . esc_html( $group ) . ' - ( ' . number_format( strlen( serialize( $cache ) ) / KB_IN_BYTES, 2 ) . 'k )</li>';
         }
         echo '</ul>';