In particular, that the character name and alliance short-thing are unescaped (I don't know what CCP allows or denies here, but better to be safe than sorry).

On top of that it's a little odd to be building up html by hand in python inside the template file, but maybe there's not much of a better way to do it, I'm not completely sure here