Escape things!

templates/library.tpl

@@ -16,7 +16,7 @@
 <div class="box">
 	<div class="boxhead"><h2>{$book.title}</h2></div>
 	<div class="boxcontent">
-		{if $book.image_url != ""}<img class="emblem" src="{$book.image_url}" alt="{$book.title}" />{/if}
+		{if $book.image_url != ""}<img class="emblem" src="{$book.image_url|escape}" alt="{$book.title|escape}" />{/if}
 		<p>{$book.author}</p>
 		<p>{$book.description}</p>
 		{if $book.onloan}<p>On loan</p>{else}<p>Book Available</p>{/if}