Changeset 47654

Timestamp:

04/29/2020 04:42:56 PM (4 years ago)

Author:

whyisjake

Message:

Cache API: Ensure proper escaping around the stats method in the cache API.

Brings the changes in [47637] to the 4.5 branch.

Props: nickdaugherty, batmoo, whyisjake, westi.

File:

• branches/4.5/src/wp-includes/cache.php (modified) (1 diff)

branches/4.5/src/wp-includes/cache.php

@@ -692 +692 @@
         echo '<ul>';
         foreach ($this->cache as $group => $cache) {
-            echo "<li><strong>Group:</strong> $group - ( " . number_format( strlen( serialize( $cache ) ) / KB_IN_BYTES, 2 ) . 'k )</li>';
+            echo '<li><strong>Group:</strong> ' . esc_html( $group ) . ' - ( ' . number_format( strlen( serialize( $cache ) ) / KB_IN_BYTES, 2 ) . 'k )</li>';
         }
         echo '</ul>';