$abook->error is never htmlsanitized in 1.5.2cvs.