title: What are the security implications of using boost/format?
body: <p>I am starting to use boost/format.</p>
  
  <p>When coding with boost/format, what should I pay attention to with regard to security?</p>
  
  <p>Can I do the following without being concerned about security? </p>
  
  <pre><code>std::cout &lt;&lt; boost::format("Hello %2%! Do you want to %1%?") 
      % user_supplied_str1 % user_supplied_str2 &lt;&lt; std::endl;
  </code></pre>
  
  <p>What are situations where security would be an issue while using boost/format?</p>