BUG: Raw HTML entities (., =) displaying in UI and breaking "Login as" links (v1.9.6)

1

Captura de pantalla 2026-06-08 180753
Captura de pantalla 2026-06-08 1807531421×290 31.2 KB

Hello everyone,

After updating to version 1.9.6, I am experiencing a UI bug where special characters are being rendered as raw HTML entities across the panel instead of their actual symbols.

For example, dots show up as . and the equals sign shows up as =.

While this is mostly a visual annoyance in the domain/user lists, it completely breaks the “Login as user” (SSO) button from the admin account. The autogenerated URL contains = instead of = (e.g., [``https://panel.mydomain.com:8585/login/?loginas=myuser&token``](``https://panel.mydomain.com:8585/login/?loginas=myuser&token``)...), which causes the login token to fail and drops the session.

If I manually edit the URL in the browser and replace = with =, the login works perfectly.

Things I have already tried without success:

  • Cleared browser cache and tested in Incognito mode.

  • Regenerated system locales (locale-gen) and forced UI language changes.

  • Restarted hestia and hestia-php services.

  • Forced a clean reinstall via apt-get --reinstall install hestia.

Logs note: I’m also seeing this in the Nginx error logs constantly: PHP message: PHP Warning: Undefined array key "LC_MESSAGES" in /usr/local/hestia/web/inc/i18n.php

Has anyone else run into this template escaping issue, or is there a hotfix available to correct the URL generation?

Thanks in advance!

2

Hi,

To fix that:

cd /usr/local/hestia/web/locale/
mkdir ar
mv LC_MESSAGES ar

What’s the default language you use in Hestia (seems English but I need to confim it)?

Show the output of these commands:

locale
locale-gen
cat -A /etc/default/locale