src: do not pass user input to format string#48973

nodejs-github-bot merged 3 commits intonodejs:mainnodejs/node:mainfrom

aduh95:never-trust-user-inputaduh95/node:never-trust-user-inputCopy head branch name to clipboard