All attributes are escaped here. status() is a string when the value is inside an attribute.