Is there a risk of reflective XSS?

[QiAnXinCodeSafe]

web-api-gateway/server/server.go

Lines 300 to 304 in 2177cf7

	_, err := fmt.Fprintf(
	w,
	"The authenticating service returned an error, code='%s', details='%s'.",
	r.FormValue("error"),
	r.FormValue("error_description"))

FormValues are written directly to the ResponseWriter.