Forbid the ansible globals

2026-07-02 14:52:09 +10:00 · 2026-07-02 14:52:09 +10:00 · c6ce0311ed
commit c6ce0311ed
parent 054b90ebde
1 changed files with 7 additions and 0 deletions
--- a/src/jinjaturtle/safety.py
+++ b/src/jinjaturtle/safety.py
@ -152,6 +152,13 @@ _FORBIDDEN_REFERENCE_HEADS = frozenset(
        "request",
        "get_flashed_messages",
        "url_for",
+        # Ansible global set
+        "lookup",
+        "q",
+        "query",
+        "now",
+        "omit",
+        "undef",
    }
 )