Merge pull request #5434 from saboorian/master

Escape html chararcters in singlestat renderer

public/app/plugins/panel/singlestat/module.ts

@@ -195,7 +195,7 @@ class SingleStatCtrl extends MetricsPanelCtrl {
         data.valueFormated = this.series[0].alias;
       } else if (_.isString(lastValue)) {
         data.value = 0;
-        data.valueFormated = lastValue;
+        data.valueFormated = _.escape(lastValue);
         data.valueRounded = 0;
       } else {
         data.value = this.series[0].stats[this.panel.valueName];