interpretthis 0.2.0

Sandboxed Python AST interpreter for untrusted and LLM-generated code
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

// Copyright 2026 Thomas Santerre and Moderately AI Inc.
//
// SPDX-License-Identifier: MIT OR Apache-2.0

/// Names that are blocked from use in interpreter code.
pub const DANGEROUS_NAMES: &[&str] = &[
    // getattr/setattr/delattr are available as *bounded* builtins: the
    // attribute name is validated against BLOCKED_ATTRIBUTES (see
    // CONFORMANCE.md#eval-exec). Bare names stay off this list so the
    // builtins can resolve.
    "eval",
    "exec",
    "compile",
    "__import__",
    "globals",
    "locals",
    "vars",
    "dir",
    "open",
    "file",
    "os",
    "sys",
    "subprocess",
    "shutil",
];

/// Attribute names that are blocked on all objects.
///
/// `__class__` is blocked alongside the rest of the class-walk chain
/// (`__bases__`, `__subclasses__`, `__mro__`, …). Classes *are* supported
/// in this sandbox; legitimate code should use `type(obj)` rather than
/// `obj.__class__`. Blocking the dunder removes the first step of
/// `().__class__.__bases__[0].__subclasses__()`-style probes.
pub const BLOCKED_ATTRIBUTES: &[&str] = &[
    "__class__",
    "__globals__",
    "__code__",
    "__closure__",
    "__dict__",
    "__subclasses__",
    "__bases__",
    "__mro__",
    "__builtins__",
    "__spec__",
    "__loader__",
];