diff --git a/src/lib/badge/badgeService.js b/src/lib/badge/badgeService.js index 81f7bde..0c90ecb 100644 --- a/src/lib/badge/badgeService.js +++ b/src/lib/badge/badgeService.js @@ -99,7 +99,8 @@ class BadgeService { throw new Error(`Unknown criteria type: ${criteria.type}`); } } catch (error) { - console.error(`Error evaluating criteria for badge ${badge.badgeId}:`, error); + // Fix: Changed template literal to multiple arguments to prevent format string vulnerability + console.error('Error evaluating criteria for badge', badge.badgeId, error); return { unlocked: false, progress: 0,