From c6ce0311edcaba99ba4a471e87e8c9751a762112 Mon Sep 17 00:00:00 2001
From: Miguel Jacq <mig@mig5.net>
Date: Thu, 2 Jul 2026 14:52:09 +1000
Subject: [PATCH] Forbid the ansible globals

---
 src/jinjaturtle/safety.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/jinjaturtle/safety.py b/src/jinjaturtle/safety.py
index e049dd3..938f2ad 100644
--- a/src/jinjaturtle/safety.py
+++ b/src/jinjaturtle/safety.py
@@ -152,6 +152,13 @@ _FORBIDDEN_REFERENCE_HEADS = frozenset(
         "request",
         "get_flashed_messages",
         "url_for",
+        # Ansible global set
+        "lookup",
+        "q",
+        "query",
+        "now",
+        "omit",
+        "undef",
     }
 )