AN: Devs can not add code to be executed when adding a book. XSS!