@DeepDiver1975 okay I think I fixed it better now:
https://github.com/owncloud/apps/commit/404edc0154965197a66c007ab50a176196fe1133

This however means that an translator could XSS by adding html to his/her translation