Fix "XSS" in Add book JS form