diff --git a/core/modules/views/tests/src/Functional/Plugin/ExposedFormTest.php b/core/modules/views/tests/src/Functional/Plugin/ExposedFormTest.php
index 6eb9ee1..35a96a7 100644
--- a/core/modules/views/tests/src/Functional/Plugin/ExposedFormTest.php
+++ b/core/modules/views/tests/src/Functional/Plugin/ExposedFormTest.php
@@ -209,12 +209,12 @@ public function testExposedBlock() {
     $this->assertText($view->getTitle(), 'Block title found.');
 
     // Set a custom label on the exposed filter form block.
-    $block->getPlugin()->setConfigurationValue('views_label', 'Custom title');
+    $block->getPlugin()->setConfigurationValue('views_label', '<strong>Custom</strong> title<script>alert("hacked!");</script>');
     $block->save();
 
     // Test that the custom block label is found.
     $this->drupalGet('test_exposed_block');
-    $this->assertText('Custom title', 'Custom block title found.');
+    $this->assertRaw('<strong>Custom</strong> titlealert("hacked!");', 'Custom block title found.');
 
     // Set to hide the label on the exposed filter form block.
     $block->getPlugin()->setConfigurationValue('label_display', FALSE);
@@ -222,7 +222,7 @@ public function testExposedBlock() {
 
     // Test that the label is removed.
     $this->drupalGet('test_exposed_block');
-    $this->assertNoText('Custom title', 'Custom title was not displayed.');
+    $this->assertNoRaw('<strong>Custom</strong> titlealert("hacked!");', 'Custom title was not displayed.');
     $this->assertNoText($view->getTitle(), 'Block title was not displayed.');
 
     // Test there is an exposed form in a block.