Which is still not safe enough, and in effect can be used to access any global variable as described in the OP article. Rust formatting is done by macros - whi

Which is still not safe enough, and in effect can be used to access any global variable as described in the OP article. Rust formatting is done by macros - which expand at compile time and accept only string literals. This makes it impossible to pass user input to format!(), println!() and their ilk unless the end-user can access your compiler, in which case you have a much larger problem.