diff --git a/core/modules/system/src/Tests/System/HtaccessTest.php b/core/modules/system/src/Tests/System/HtaccessTest.php
index afc6e7b..3ce76e4 100644
--- a/core/modules/system/src/Tests/System/HtaccessTest.php
+++ b/core/modules/system/src/Tests/System/HtaccessTest.php
@@ -45,8 +45,8 @@ protected function getProtectedFiles() {
     }
 
     // Ensure composer.json and composer.lock cannot be accessed.
-    $file_paths[] = 'composer.json';
-    $file_paths[] = 'composer.lock';
+    $file_paths[] = "$path/composer.json";
+    $file_paths[] = "$path/composer.lock";
 
     return $file_paths;
   }
diff --git a/core/modules/system/tests/fixtures/HtaccessTest/composer.json b/core/modules/system/tests/fixtures/HtaccessTest/composer.json
new file mode 100644
index 0000000..e69de29
diff --git a/core/modules/system/tests/fixtures/HtaccessTest/composer.lock b/core/modules/system/tests/fixtures/HtaccessTest/composer.lock
new file mode 100644
index 0000000..e69de29