From cab19910f077cf833c78ea7d4a2c952636c9c875 Mon Sep 17 00:00:00 2001
From: James Pepper <james@bitsleuth.ai>
Date: Wed, 27 May 2026 18:09:36 +0100
Subject: [PATCH] Potential fix for code scanning alert no. 8: Use of
 externally-controlled format string

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 src/lib/blockchain-api.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/blockchain-api.ts b/src/lib/blockchain-api.ts
index 724563a..660b3bf 100644
--- a/src/lib/blockchain-api.ts
+++ b/src/lib/blockchain-api.ts
@@ -301,7 +301,7 @@ export async function getTransactionData(txid: string): Promise<{ data: Transact
         txData.vin?.forEach((inp: any) => { netAmountSatoshis -= inp.prevout?.value ?? 0; });
 
         const netBtc = netAmountSatoshis / 1e8;
-        console.debug(`[getTransactionData] Computed net BTC for ${txid}:`, netBtc);
+        console.debug('[getTransactionData] Computed net BTC for %s:', txid, netBtc);
 
         const transaction: Transaction = {
             id: txData.txid, date: txDate.toISOString(),