Review dynamic interpolation in Django format_html
Django `format_html` calls with placeholder templates and dynamic arguments should be reviewed for unsafe output composition.
#Metadata
#Why it matters
Unsafe interpolation patterns can still produce dangerous HTML when trusted and untrusted fragments are mixed incorrectly.
#Remediation
Keep templates static, ensure interpolated values are trusted for the target context, and avoid assembling HTML from user-controlled fragments.
#Repository path
The generated metadata points to critiq-rules/libs/rules/catalog/rules/python/py.security.django-format-html-unsafe.rule.yaml.