db50674
--- a/src/window.c
db50674
+++ b/src/window.c
db50674
@@ -231,9 +231,9 @@ int xa_show_message_dialog (GtkWindow *window,int mode,int type,int button,const
db50674
 {
db50674
 	int response;
db50674
 
db50674
-	dialog = gtk_message_dialog_new (window,mode,type,button,message1);
db50674
+	dialog = gtk_message_dialog_new (window,mode,type,button,"%s",message1);
db50674
 	gtk_dialog_set_default_response (GTK_DIALOG (dialog),GTK_RESPONSE_NO);
db50674
-	gtk_message_dialog_format_secondary_text (GTK_MESSAGE_DIALOG (dialog),message2);
db50674
+	gtk_message_dialog_format_secondary_text (GTK_MESSAGE_DIALOG (dialog),"%s",message2);
db50674
 	response = gtk_dialog_run (GTK_DIALOG (dialog));
db50674
 	gtk_widget_destroy (GTK_WIDGET (dialog));
db50674
 	return response;
db50674
@@ -509,7 +509,7 @@ void xa_list_archive (GtkMenuItem *menuitem,gpointer data)
db50674
 			g_fprintf (stream,_("Comment:\n"));
db50674
 			if (bp)
db50674
 				g_fprintf(stream,"
");
db50674
-			g_fprintf (stream,archive[idx]->comment->str);
db50674
+			g_fprintf (stream,"%s",archive[idx]->comment->str);
db50674
 			if (bp)
db50674
 				g_fprintf(stream,"");
db50674
 			g_fprintf (stream,"\n");