In English, please :smile_cat: 

But yeah, item.name must be escaped. Not only here, but every place where a item.name or a part of it is inserted into markup. 
I recently fixed similar XSS bugs in select2 formatters. Please be careful here.