--- src/localize.c.str	2009-04-11 21:06:04.000000000 +0200
+++ src/localize.c	2009-04-11 21:07:56.000000000 +0200
@@ -1281,14 +1281,14 @@
 {
     ctmbstr fmt = GetFormatFromCode(code);
     doc->badAccess = yes;
-    messageNode( doc, TidyAccess, node, fmt );
+    messageNode( doc, TidyAccess, node, "%s", fmt );
 }
 
 void ReportAccessError( TidyDocImpl* doc, Node* node, uint code )
 {
     ctmbstr fmt = GetFormatFromCode(code);
     doc->badAccess = yes;
-    messageNode( doc, TidyAccess, node, fmt );
+    messageNode( doc, TidyAccess, node, "%s", fmt );
 }
 
 #endif /* SUPPORT_ACCESSIBILITY_CHECKS */
@@ -1307,7 +1307,7 @@
     switch (code)
     {
     case NESTED_QUOTATION:
-        messageNode(doc, TidyWarning, rpt, fmt);
+        messageNode(doc, TidyWarning, rpt, "%s", fmt);
         break;
 
     case OBSOLETE_ELEMENT:
@@ -1388,7 +1388,7 @@
     case INCONSISTENT_NAMESPACE:
     case DOCTYPE_AFTER_TAGS:
     case DTYPE_NOT_UPPER_CASE:
-        messageNode(doc, TidyWarning, rpt, fmt);
+        messageNode(doc, TidyWarning, rpt, "%s", fmt);
         break;
 
     case COERCE_TO_ENDTAG:
@@ -1404,7 +1404,7 @@
     case ENCODING_IO_CONFLICT:
     case MISSING_DOCTYPE:
     case SPACE_PRECEDING_XMLDECL:
-        messageNode(doc, TidyWarning, node, fmt);
+        messageNode(doc, TidyWarning, node, "%s", fmt);
         break;
 
     case TRIM_EMPTY_ELEMENT:
@@ -1450,7 +1450,7 @@
     {
     case SUSPECTED_MISSING_QUOTE:
     case DUPLICATE_FRAMESET:
-        messageNode(doc, TidyError, rpt, fmt);
+        messageNode(doc, TidyError, rpt, "%s", fmt);
         break;
 
     case UNKNOWN_ELEMENT:
@@ -1725,7 +1725,7 @@
     
     tmbsnprintf(buf, sizeof(buf), msgfmt, helper, platform, 
              date, __DATE__, __TIME__, filename);
-    tidy_out( doc, buf );
+    tidy_out( doc, "%s", buf );
 }
 
 void ReportMarkupVersion( TidyDocImpl* doc )