Use secure module importer for the untrusted Pytho n expression.

zopefoundation · Jul 28, 2011 · 126bb9a · 126bb9a
1 parent 39362e3
commit 126bb9a
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/five/pt/expressions.py b/src/five/pt/expressions.py
@@ -214,6 +214,9 @@ class UntrustedPythonExpr(expressions.PythonExpr):
         (name, static(builtin)) for (name, builtin) in utility_builtins.items()
         ))
 
+    builtins['modules'] = template("cls()", cls=Symbol(
+        ZRPythonExpr._SecureModuleImporter), mode="eval")
+
     def rewrite(self, node):
         if node.id == 'repeat':
             node.id = 'wrapped_repeat'