diff --git a/src/calibre/ebooks/oeb/transforms/jacket.py b/src/calibre/ebooks/oeb/transforms/jacket.py
index add9f85e08..6d36ef44fa 100644
--- a/src/calibre/ebooks/oeb/transforms/jacket.py
+++ b/src/calibre/ebooks/oeb/transforms/jacket.py
@@ -65,9 +65,9 @@ class Jacket(object):
if not comments.strip():
comments = ''
comments = comments.replace('\r\n', '\n').replace('\n\n', '
')
- series = 'Series: ' + mi.series if mi.series else ''
+ series = 'Series: ' + escape(mi.series if mi.series else '')
if series and mi.series_index is not None:
- series += ' [%s]'%mi.format_series_index()
+ series += escape(' [%s]'%mi.format_series_index())
tags = mi.tags
if not tags:
try:
@@ -75,7 +75,7 @@ class Jacket(object):
except:
tags = []
if tags:
- tags = 'Tags: ' + self.opts.dest.tags_to_string(tags)
+ tags = 'Tags: ' + escape(self.opts.dest.tags_to_string(tags))
else:
tags = ''
try:
@@ -84,8 +84,8 @@ class Jacket(object):
title = _('Unknown')
html = self.JACKET_TEMPLATE%dict(xmlns=XPNSMAP['h'],
title=escape(title), comments=escape(comments),
- jacket=escape(_('Book Jacket')), series=escape(series),
- tags=escape(tags))
+ jacket=escape(_('Book Jacket')), series=series,
+ tags=tags)
id, href = self.oeb.manifest.generate('jacket', 'jacket.xhtml')
root = etree.fromstring(html)
item = self.oeb.manifest.add(id, href, guess_type(href)[0], data=root)