Merge remote-tracking branch 'origin/MAGETWO-88657' into 2.3.0-release-pr37

Author: zakdma

app/code/Magento/Widget/Block/Adminhtml/Widget/Chooser.php

@@ -11,6 +11,9 @@
  */
 namespace Magento\Widget\Block\Adminhtml\Widget;
 
+/**
+ * Chooser widget block.
+ */
 class Chooser extends \Magento\Backend\Block\Template
 {
     /**
@@ -180,7 +183,7 @@ protected function _toHtml()
             <label class="widget-option-label" id="' .
             $chooserId .
             'label">' .
-            ($this->getLabel() ? $this->getLabel() : __(
+            ($this->getLabel() ? $this->escapeHtml($this->getLabel()) : __(
                 'Not Selected'
             )) .
             '</label>