fix: block format attributes (#22028)

frappe · Aug 12, 2023 · ce1355d · ce1355d
1 parent 16aa414
commit ce1355d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/frappe/utils/safe_exec.py b/frappe/utils/safe_exec.py
@@ -388,6 +388,9 @@ def _getattr(object, name, default=None):
 		# Traceback Attributes
 		"tb_frame",
 		"tb_next",
+		# Format Attributes
+		"format",
+		"format_map",
 	}
 
 	if isinstance(name, str) and (name in UNSAFE_ATTRIBUTES):