diff --git a/core/modules/views/views.module b/core/modules/views/views.module index 23fd877..408e934 100644 --- a/core/modules/views/views.module +++ b/core/modules/views/views.module @@ -10,6 +10,7 @@ */ use Drupal\Component\Utility\Html; +use Drupal\Component\Utility\SafeMarkup; use Drupal\Component\Utility\String; use Drupal\Core\Cache\Cache; use Drupal\Core\Database\Query\AlterableInterface; @@ -25,6 +26,7 @@ use Drupal\views\Views; use Drupal\field\FieldConfigInterface; + /** * Implements hook_help(). */ @@ -674,7 +676,7 @@ function views_pre_render_views_form_views_form($element) { } // Apply substitutions to the rendered output. - $element['output'] = array('#markup' => str_replace($search, $replace, drupal_render($element['output']))); + $element['output'] = array('#markup' => SafeMarkup::set(str_replace($search, $replace, drupal_render($element['output'])))); // Sort, render and add remaining form fields. $children = Element::children($element, TRUE);