security: Prevent arbitrary method invocation on conditions in if tag.