Embarrassing oversight on extension URI path
Merge pull request #1042 from GawainLynch/hotfix/paths

Embarrassing oversight on extension URI path
Security fix: HTML-encode translation parameters
Fixed an XSS vuln in backend

Content type names are strings, not HTML, and should never be output
unencoded.