lucasew · lucasew · Feb 28, 2026 · Feb 27, 2026 · Feb 27, 2026 · Feb 27, 2026
diff --git a/.jules/janitor.md b/.jules/janitor.md
@@ -3,3 +3,4 @@
 - 2026-01-20: Extract complex, self-contained logic blocks from main handlers into helper functions.
 - 2026-01-26: Separate configuration data (like lists of magic strings) from business logic.
 - 2025-02-18: Remove redundant tests that validate copy-pasted logic instead of the actual function.
+- 2025-02-24: Use %q in logs for untrusted input to prevent log injection.
- 2026-01-20: Extract complex, self-contained logic blocks from main handlers into helper functions.
- 2026-01-26: Separate configuration data (like lists of magic strings) from business logic.
- 2025-02-18: Remove redundant tests that validate copy-pasted logic instead of the actual function.
- 2025-02-24: Use %q in logs for untrusted input to prevent log injection.
+- 2026-01-26: Separate configuration data (like lists of magic strings) from business logic.
+- 2026-01-20: Extract complex, self-contained logic blocks from main handlers into helper functions.
+- 2025-02-24: Use %q in logs for untrusted input to prevent log injection.
+- 2025-02-18: Remove redundant tests that validate copy-pasted logic instead of the actual function.
- 2026-01-20: Extract complex, self-contained logic blocks from main handlers into helper functions.
- 2026-01-26: Separate configuration data (like lists of magic strings) from business logic.
- 2025-02-18: Remove redundant tests that validate copy-pasted logic instead of the actual function.
- 2025-02-24: Use %q in logs for untrusted input to prevent log injection.
+- 2026-01-26: Separate configuration data (like lists of magic strings) from business logic.
+- 2026-01-20: Extract complex, self-contained logic blocks from main handlers into helper functions.
+- 2025-02-24: Use %q in logs for untrusted input to prevent log injection.
+- 2025-02-18: Remove redundant tests that validate copy-pasted logic instead of the actual function.
diff --git a/api/index.go b/api/index.go
@@ -492,7 +492,7 @@ func handler(w http.ResponseWriter, r *http.Request) {
 	rawLink := reconstructTargetURL(r)
 
 	format := getFormat(r)
-	log.Printf("request: %s %s", format, rawLink)
+	log.Printf("request: %q %q", format, rawLink)
 
 	link, err := normalizeAndValidateURL(rawLink)
 	if err != nil {

diff --git a/mise.toml b/mise.toml
@@ -51,5 +51,5 @@ run = "echo 'No codegen tasks'"
 description = "Run code generation"
 
 [tasks.ci]
-depends = ["install", "lint", "test"]
+depends = ["lint", "test"]
 description = "Run CI pipeline"