> Is not possible to inject malicious code through a translation file?

Good point, sorry!