From 019362bd9670a8d152ce6b447e44d38d3bc3b226 Mon Sep 17 00:00:00 2001 From: Campbell Barton Date: Sat, 27 May 2023 15:42:25 +1000 Subject: [PATCH] Test: ensure __builtins__ can't workaround secure driver evaluation --- tests/python/bl_pyapi_bpy_driver_secure_eval.py | 1 + 1 file changed, 1 insertion(+) diff --git a/tests/python/bl_pyapi_bpy_driver_secure_eval.py b/tests/python/bl_pyapi_bpy_driver_secure_eval.py index 953dbcd5381..8dfc1e5571a 100644 --- a/tests/python/bl_pyapi_bpy_driver_secure_eval.py +++ b/tests/python/bl_pyapi_bpy_driver_secure_eval.py @@ -174,6 +174,7 @@ class TestRejectModuleAccess(unittest.TestCase, TestExprMixIn_Reject): "__import__('os').expect_os_unreachable()", "exec(\"__import__('os').expect_os_unreachable()\")", "(globals().update(__import__('os').__dict__), expect_os_unreachable())", + "__builtins__['getattr'](__builtins__['__import__']('os'), 'expect_os_unreachable')()", ) # Ensure the functions are actually called.