From a0b37401005009df705e9987695fb03052a9c44e Mon Sep 17 00:00:00 2001
From: Leonora Tindall <nora@nora.codes>
Date: Wed, 19 Aug 2026 11:00:16 -0500
Subject: [PATCH] avoid printf injection

---
 nnote | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nnote b/nnote
index 57f557f..964e3ae 100755
--- a/nnote
+++ b/nnote
@@ -40,7 +40,7 @@ else
   NOTEPATH="$DATEDIR/$NOTENAME"
   echo "$NOTEPATH"
   if ! [ -f "$NOTEPATH" ]; then
-    printf "$NOTENAME$NOTEHEAD\n---\n\n" > "$NOTEPATH"
+    printf "%s%s\n---\n\n" "$NOTENAME" "$NOTEHEAD" > "$NOTEPATH"
   fi
   pushd "$NOTESDIR" > /dev/null
   printf "\033]2;$NOTENAME $NOTETYPE note\a"