Update global-constants-and-functions.rst

The $number variable should be santisised.

Author: doonot

en/core-libraries/global-constants-and-functions.rst

@@ -28,7 +28,7 @@ such as debugging and translating content.
  ``sprintf()``. You can supply additional arguments to replace
  placeholders in your string::
 
- __('You have %s unread messages', $number);
+ __('You have %s unread messages', h($number));
 
  .. note::