core/modules/quickedit/js/theme.js                   | 1 +
 core/modules/quickedit/js/views/EntityToolbarView.js | 1 +
 2 files changed, 2 insertions(+)

diff --git a/core/modules/quickedit/js/theme.js b/core/modules/quickedit/js/theme.js
index 48b6e73..76cf875 100644
--- a/core/modules/quickedit/js/theme.js
+++ b/core/modules/quickedit/js/theme.js
@@ -59,6 +59,7 @@
    *   The corresponding HTML.
    */
   Drupal.theme.quickeditEntityToolbarLabel = function (settings) {
+    // @todo Add XSS regression test coverage in https://www.drupal.org/node/2547437
     return '<span class="field">' + Drupal.checkPlain(settings.fieldLabel) + '</span>' + Drupal.checkPlain(settings.entityLabel);
   };
 
diff --git a/core/modules/quickedit/js/views/EntityToolbarView.js b/core/modules/quickedit/js/views/EntityToolbarView.js
index 55d9662..a9c5be8 100644
--- a/core/modules/quickedit/js/views/EntityToolbarView.js
+++ b/core/modules/quickedit/js/views/EntityToolbarView.js
@@ -454,6 +454,7 @@
         });
       }
       else {
+        // @todo Add XSS regression test coverage in https://www.drupal.org/node/2547437
         label = Drupal.checkPlain(entityLabel);
       }