Use call_user_func instead of a variable function

To allow calling methods on objects while sanitizing, replace the
variable function call with call_user_func()