Fix potential log forgery via status string