diff --git a/tests/qgis-projects/tests/xss.qgs b/tests/qgis-projects/tests/xss.qgs
index 2bcc887490..9c7dd13c71 100644
--- a/tests/qgis-projects/tests/xss.qgs
+++ b/tests/qgis-projects/tests/xss.qgs
@@ -593,7 +593,12 @@ def my_form_open(dialog, layer, feature):
"ID"
- <iframe src="[% "media" %]" width="100%" height="500px"></iframe>
+ <object data="[% "media" %]" type="application/pdf" width="100%" height="500px">
+ <p>
+ You don't have a PDF plugin, but you can
+ <a href="[% "media" %]">download the PDF file. </a>
+ </p>
+</object>
diff --git a/tests/qgis-projects/tests/xss.qgs.cfg b/tests/qgis-projects/tests/xss.qgs.cfg
index 4b19d56dbe..097fde36f8 100644
--- a/tests/qgis-projects/tests/xss.qgs.cfg
+++ b/tests/qgis-projects/tests/xss.qgs.cfg
@@ -83,7 +83,7 @@
"link": "",
"minScale": 1,
"maxScale": 1000000000000,
- "toggled": "False",
+ "toggled": "True",
"popup": "True",
"popupSource": "qgis",
"popupTemplate": "",