idea for fixing bug #142

zopefoundation · Oct 25, 2018 · a67e41d · a67e41d
1 parent c055c52
commit a67e41d
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/RestrictedPython/Guards.py b/src/RestrictedPython/Guards.py
@@ -266,6 +266,11 @@ def safer_getattr(object, name, getattr=getattr):
     if isinstance(object, _compat.basestring) and name == 'format':
         raise NotImplementedError(
             'Using format() on a %s is not safe.' % object.__class__.__name__)
+    if name.startswith('_'):
+        raise ValueError(
+            '"{name}" is an invalid attribute name because it '
+                'starts with "_"'.format(name=name))
+        )
     return getattr(object, name)