diff --git a/core/modules/views/src/Plugin/views/PluginBase.php b/core/modules/views/src/Plugin/views/PluginBase.php
index d05de9d..50e7d85 100644
--- a/core/modules/views/src/Plugin/views/PluginBase.php
+++ b/core/modules/views/src/Plugin/views/PluginBase.php
@@ -350,7 +350,7 @@ public function globalTokenReplace($string = '', array $options = array()) {
    */
   protected function viewsTokenReplace($text, $tokens) {
     if (empty($tokens) || empty($text)) {
-      return $text;
+      return Xss::filterAdmin($text);
     }
 
     // Separate Twig tokens from other tokens (e.g.: contextual filter tokens in