From 6488eb8714382d090b156649e8e02e21a28a4448 Mon Sep 17 00:00:00 2001 From: James Daily Date: Fri, 6 Mar 2026 15:11:46 -0500 Subject: [PATCH] fix: use explicit format verb in logger middleware Printf calls Passing a dynamic string directly as a format argument to Warnf/Errorf/Infof triggers staticcheck SA1006 and can misinterpret % characters in URL paths (e.g. %2F, %20) as format directives, producing garbled output. Use "%s" as an explicit format string instead. --- pkg/middleware/logger.go | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkg/middleware/logger.go b/pkg/middleware/logger.go index 75aabf2..70890c1 100644 --- a/pkg/middleware/logger.go +++ b/pkg/middleware/logger.go @@ -104,11 +104,11 @@ func (lm LoggingMiddleware) Handler(next http.Handler) http.Handler { switch { case lrw.StatusCode >= 400 && lrw.StatusCode <= 499: - logger.Warnf(message) + logger.Warnf("%s", message) case lrw.StatusCode >= 500 && lrw.StatusCode <= 599: - logger.Errorf(message) + logger.Errorf("%s", message) default: - logger.Infof(message) + logger.Infof("%s", message) } }) }