If you discover any security-related issues, please email [email protected] instead of using the issue tracker.

• HTML is allowed in translations because you sometimes need it. Any reports regarding this will not be accepted as a security issue. Owners of a website can narrow down who can add/edit translation strings using the group permissions.