1d5758
diff --git a/src/localize.c b/src/localize.c
1d5758
index b832c23..e8c8027 100644
1d5758
--- a/src/localize.c
1d5758
+++ b/src/localize.c
1d5758
@@ -1373,14 +1373,14 @@ void TY_(ReportAccessWarning)( TidyDocImpl* doc, Node* node, uint code )
1d5758
 {
1d5758
     ctmbstr fmt = GetFormatFromCode(code);
1d5758
     doc->badAccess |= BA_WAI;
1d5758
-    messageNode( doc, TidyAccess, node, fmt );
1d5758
+    messageNode( doc, TidyAccess, node, "%s", fmt );
1d5758
 }
1d5758
 
1d5758
 void TY_(ReportAccessError)( TidyDocImpl* doc, Node* node, uint code )
1d5758
 {
1d5758
     ctmbstr fmt = GetFormatFromCode(code);
1d5758
     doc->badAccess |= BA_WAI;
1d5758
-    messageNode( doc, TidyAccess, node, fmt );
1d5758
+    messageNode( doc, TidyAccess, node, "%s", fmt );
1d5758
 }
1d5758
 
1d5758
 #endif /* SUPPORT_ACCESSIBILITY_CHECKS */
1d5758
@@ -1399,7 +1399,7 @@ void TY_(ReportWarning)(TidyDocImpl* doc, Node *element, Node *node, uint code)
1d5758
     switch (code)
1d5758
     {
1d5758
     case NESTED_QUOTATION:
1d5758
-        messageNode(doc, TidyWarning, rpt, fmt);
1d5758
+        messageNode(doc, TidyWarning, rpt, "%s", fmt);
1d5758
         break;
1d5758
 
1d5758
     case OBSOLETE_ELEMENT:
1d5758
@@ -1480,7 +1480,7 @@ void TY_(ReportError)(TidyDocImpl* doc, Node *element, Node *node, uint code)
1d5758
     case INCONSISTENT_NAMESPACE:
1d5758
     case DOCTYPE_AFTER_TAGS:
1d5758
     case DTYPE_NOT_UPPER_CASE:
1d5758
-        messageNode(doc, TidyWarning, rpt, fmt);
1d5758
+        messageNode(doc, TidyWarning, rpt, "%s", fmt);
1d5758
         break;
1d5758
 
1d5758
     case COERCE_TO_ENDTAG:
1d5758
@@ -1499,7 +1499,7 @@ void TY_(ReportError)(TidyDocImpl* doc, Node *element, Node *node, uint code)
1d5758
     case ENCODING_IO_CONFLICT:
1d5758
     case MISSING_DOCTYPE:
1d5758
     case SPACE_PRECEDING_XMLDECL:
1d5758
-        messageNode(doc, TidyWarning, node, fmt);
1d5758
+        messageNode(doc, TidyWarning, node, "%s", fmt);
1d5758
         break;
1d5758
 
1d5758
     case TRIM_EMPTY_ELEMENT:
1d5758
@@ -1548,7 +1548,7 @@ void TY_(ReportFatal)( TidyDocImpl* doc, Node *element, Node *node, uint code)
1d5758
     {
1d5758
     case SUSPECTED_MISSING_QUOTE:
1d5758
     case DUPLICATE_FRAMESET:
1d5758
-        messageNode(doc, TidyError, rpt, fmt);
1d5758
+        messageNode(doc, TidyError, rpt, "%s", fmt);
1d5758
         break;
1d5758
 
1d5758
     case UNKNOWN_ELEMENT: