Is not possible to inject malicious code through a translation file?