mig5/jinjaturtle
1
0
Fork 0
Code Issues Pull requests Projects Releases 16 Packages Wiki Activity Actions

Forbid the ansible globals
All checks were successful
CI / test (push) Successful in 51s
Details
CI / test (debian, docker.io/library/debian:13, python3) (push) Successful in 1m36s
Details
Lint / test (push) Successful in 42s
Details

Browse source
This commit is contained in:
Miguel Jacq 2026-07-02 14:52:09 +10:00
parent 054b90ebde
commit c6ce0311ed
Signed by: mig5
GPG key ID: 03906B4110AAD3B8
1 changed files with 7 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/jinjaturtle/safety.py
View file

@ -152,6 +152,13 @@ _FORBIDDEN_REFERENCE_HEADS = frozenset(
"request", "request",
"get_flashed_messages", "get_flashed_messages",
"url_for", "url_for",
# Ansible global set
"lookup",
"q",
"query",
"now",
"omit",
"undef",
} }
) )