Don't escape label contents

Trying to protect against XSS in the case that someone is using
user input for label contents is not worth the trade-off of disallowing
users of the library to customize the HTML contents of their labels.

If you are using user input in your labels, I recommend escaping
that data manually before including it in your label.

src/AdamWathan/Form/Elements/Label.php

@@ -20,13 +20,13 @@ public function render()
         $tags = [sprintf('<label%s>', $this->renderAttributes())];
 
         if ($this->labelBefore) {
-            $tags[] = $this->escape($this->label);
+            $tags[] = $this->label;
         }
 
         $tags[] = $this->renderElement();
 
         if (! $this->labelBefore) {
-            $tags[] = $this->escape($this->label);
+            $tags[] = $this->label;
         }
 
         $tags[] = '</label>';

tests/LabelTest.php

@@ -75,12 +75,4 @@ public function testCanRetrieveElement()
         $result = $label->after($element)->getControl();
         $this->assertEquals($element, $result);
     }
-
-    public function testAgainstXssAttacksInLabel()
-    {
-        $label = new Label('<script>alert("xss")</script>');
-        $expected = '<label>&lt;script&gt;alert(&quot;xss&quot;)&lt;/script&gt;</label>';
-        $result = $label->render();
-        $this->assertEquals($expected, $result);
-    }
 }