innerHtml can not execute javascript from "data". If someone modify php files returned from jquery function and includes a script, it's not executed.
If language is not defined returns an array instead of a string which makes function Mail::Send to throw a warning.