Web: make log macro message handling safer

It should not mark the whole message as safe to include in HTML.