docs: eliminate usage of %s

I made one example slightly more complicated, but documentation should show best practices rather than mislead to vulnerabilities.

Note that the template section says nothing about escaping. In my eyes this is a important feature and should find its way into the tutorial.