I've recently come across a defect in my code that looks like this:
msg := Format('%s' + foo, [bar]);
If foo contains any format placeholders, e.g. %s, %20, etc. then this will result in an exception being raised.
It's a stupid mistake, but now I want to check my entire codebase to see we've done it elsewhere.
Ideally I'd like a static tool that detects any call to Format or common equivalent like Exception.CreateFmt for which the format string is not a literal. I don't think FixInsight has such a warning.
Does anybody know of such a tool?