small xss vulnerability and translation ability fix