diff --git a/src/lint/linter/xhpast/rules/ArcanistFormattedStringXHPASTLinterRule.php b/src/lint/linter/xhpast/rules/ArcanistFormattedStringXHPASTLinterRule.php
index 333d7ab1..7b5ed3bb 100644
--- a/src/lint/linter/xhpast/rules/ArcanistFormattedStringXHPASTLinterRule.php
+++ b/src/lint/linter/xhpast/rules/ArcanistFormattedStringXHPASTLinterRule.php
@@ -1,103 +1,108 @@
 <?php
 
 final class ArcanistFormattedStringXHPASTLinterRule
   extends ArcanistXHPASTLinterRule {
 
   const ID = 54;
 
   private $printfFunctions = array();
 
   public function getLintName() {
     return pht('Formatted String');
   }
 
   public function getLinterConfigurationOptions() {
     return parent::getLinterConfigurationOptions() + array(
       'xhpast.printf-functions' => array(
         'type' => 'optional map<string, int>',
         'help' => pht(
           '`%s`-style functions which take a format string and list of values '.
           'as arguments. The value for the mapping is the start index of the '.
           'function parameters (the index of the format string parameter).',
           'printf()'),
       ),
     );
   }
 
   public function setLinterConfigurationValue($key, $value) {
     switch ($key) {
       case 'xhpast.printf-functions':
         $this->printfFunctions = $value;
         return;
       default:
         return parent::setLinterConfigurationValue($key, $value);
     }
   }
 
   public function process(XHPASTNode $root) {
     static $functions = array(
       // Core PHP
       'fprintf' => 1,
       'printf' => 0,
       'sprintf' => 0,
       'vfprintf' => 1,
 
       // libphutil
       'csprintf' => 0,
       'execx' => 0,
       'exec_manual' => 0,
       'hgsprintf' => 0,
       'hsprintf' => 0,
       'jsprintf' => 0,
       'pht' => 0,
       'phutil_passthru' => 0,
       'qsprintf' => 1,
       'queryfx' => 1,
       'queryfx_all' => 1,
       'queryfx_one' => 1,
       'vcsprintf' => 0,
       'vqsprintf' => 1,
     );
 
     $function_calls = $root->selectDescendantsOfType('n_FUNCTION_CALL');
 
     foreach ($function_calls as $call) {
       $name = $call->getChildByIndex(0)->getConcreteString();
 
       $name = strtolower($name);
       $start = idx($functions + $this->printfFunctions, $name);
 
       if ($start === null) {
         continue;
       }
 
       $parameters = $call->getChildOfType(1, 'n_CALL_PARAMETER_LIST');
       $argc = count($parameters->getChildren()) - $start;
 
       if ($argc < 1) {
         $this->raiseLintAtNode(
           $call,
           pht('This function is expected to have a format string.'));
           continue;
       }
 
       $format = $parameters->getChildByIndex($start);
-      if ($format->getTypeName() != 'n_STRING_SCALAR') {
+      if (!$format->isConstantString()) {
+
+        // TODO: When this parameter is not a constant string, the call may
+        // be unsafe. We should make some attempt to warn about this for
+        // "qsprintf()" and other security-sensitive functions.
+
         continue;
       }
 
       $argv = array($format->evalStatic()) + array_fill(0, $argc, null);
 
       try {
         xsprintf(null, null, $argv);
       } catch (BadFunctionCallException $ex) {
         $this->raiseLintAtNode(
           $call,
           str_replace('xsprintf', $name, $ex->getMessage()));
       } catch (InvalidArgumentException $ex) {
         // Ignore.
       }
     }
   }
 
 }
diff --git a/src/lint/linter/xhpast/rules/__tests__/formatted-string/formatted-string.lint-test b/src/lint/linter/xhpast/rules/__tests__/formatted-string/formatted-string.lint-test
index 388d6d63..67ec7746 100644
--- a/src/lint/linter/xhpast/rules/__tests__/formatted-string/formatted-string.lint-test
+++ b/src/lint/linter/xhpast/rules/__tests__/formatted-string/formatted-string.lint-test
@@ -1,28 +1,33 @@
 <?php
 
 printf();
 printf(null);
 printf('');
 
 sprintf('%s');
 pht('%s', 'foo', 'bar');
 
 fprintf(null, 'x');
 queryfx(null, 'x', 'y');
 
 foobar(null, null, '%s');
+
+pht('x %s y');
+pht('x %s y'.'z');
 ~~~~~~~~~~
 error:3:1:XHP54:Formatted String
 error:7:1:XHP54:Formatted String
 error:8:1:XHP54:Formatted String
 error:11:1:XHP54:Formatted String
 error:13:1:XHP54:Formatted String
+error:15:1:XHP54:Formatted String
+error:16:1:XHP54:Formatted String
 ~~~~~~~~~~
 ~~~~~~~~~~
 {
   "config": {
     "xhpast.printf-functions": {
       "foobar": 2
     }
   }
 }