Alex Kirk

This plugin ensures that any text coming from a translation file (<code>.po</code> or <code>.mo</code>) is run through an escaping function before it is output to the user.
Escaping refers to the modification of the text so that special control characters do not have an effect (for example <code><</code> in HTML).
Example: If an original text does not contain HTML, then a translated text should not be allowed to contain HTML either. Thus, an HTML link introduced by a translator should have no effect because this was not intended by the developer.
This plugin is in the proof-of-concept stage, it was created to test if the escaping of translated text can be handled in a general way, whether it severely affects the performance of a site, and if it breaks things.
For text without HTML, the text is sent through <code>esc_html()</code>, for text containing HTML tags, it is sent through <code>wp_kses()</code> which is provided with a list of allowed HTML tags and attributes, derived from the original string.
Thus this plugin tries to show a generic way of how to make sure that translated text is escaped. This is something that can eventually be ported to core.

Secure Gettext

Escapes translated text before it gets output. This adds an extra security layer around translated text.

Michael Uno

miunosoft

<h4>Custom Translations</h4>
Let’s say, you have translated a plugin or theme and have a mo file ready. But the plugin author does not respond to your submission offer or you cannot contact the author for whatever reasons.
In this case, you may be able to upload the file in the location that the plugin uses within the plugin’s directory but this is not ideal because when it is updated, your translation file will be gone. You have to repeat doing it.
This plugin solves this problem by allowing you to upload the mo file and lets WordPress use it.
What you need are:
<ul>
<li>mo file (the translation file with a text domain prefix)</li>
<li>text domain (usually the plugin/theme slug)</li>
</ul>
Set these in the setting page and the plugin will take care of the rest.
It’s simple and lightweight.

Custom Translation Files

Allows you to set custom translation files for a particular text domain.

Secure Gettext vs Custom Translation Files