diff --git a/wp-includes/class-wp-theme.php b/wp-includes/class-wp-theme.php
index f161a63186..00281f06a8 100644
--- a/wp-includes/class-wp-theme.php
+++ b/wp-includes/class-wp-theme.php
@@ -721,8 +721,9 @@ final class WP_Theme implements ArrayAccess {
 	private function markup_header( $header, $value, $translate ) {
 		switch ( $header ) {
 			case 'Name' :
-				if ( empty( $value ) )
-					$value = $this->get_stylesheet();
+				if ( empty( $value ) ) {
+					$value = esc_html( $this->get_stylesheet() );
+				}
 				break;
 			case 'Description' :
 				$value = wptexturize( $value );
diff --git a/wp-includes/version.php b/wp-includes/version.php
index 49adb9f094..f5979d9f83 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -4,7 +4,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '4.7.1-RC1-39796';
+$wp_version = '4.7.1-RC1-39809';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.