CVE-2015-3200: escape all strings for logging (fixes #2646 log file injection) from Brad (maintainer)