Tweaks and escaping things properly

templates/library-addbook.tpl

@@ -30,15 +30,15 @@
 
 	<div class="row">	
 		<label for="title">Title</label>
-		<span class="textinput"><input type="text" name="title" width="200" value="{$book.title}" /></span>
+		<span class="textinput"><input type="text" name="title" width="200" value="{$book.title|escape}" /></span>
 	</div>
 	<div class="row">	
 		<label for="author">Author</label>
-		<span class="textinput"><input type="text" name="author" value="{$book.author}" /></span>
+		<span class="textinput"><input type="text" name="author" value="{$book.author|escape}" /></span>
 	</div>
 	<div class="row">	
 		<label for="publisher">Publisher</label>
-		<span class="textinput"><input type="text" name="publisher" value="{$book.publisher}" /></span>
+		<span class="textinput"><input type="text" name="publisher" value="{$book.publisher|escape}" /></span>
 	</div>
 	<div class="row">	
 		<label for="comments">Comments</label>