SafeValue must use [property]=binding: Login
(see https://g.co/ng/security#xss)