Mm, the security vulnerabilities are definitely an important concern. What about using `to_liquid.include?` instead?