For printf, a linter checks that the format string is a constant literal, so the implementation can assume it's always safe.
(format string, arg ...interface{})
| 81 | // a constant literal, so the implementation can assume it's always |
| 82 | // safe. |
| 83 | Printf(format string, arg ...interface{}) |
| 84 | |
| 85 | // UnsafeString writes an unsafe string. |
| 86 | UnsafeString(string) |
no outgoing calls