Function build_safe_builtins

backend_api_python/app/utils/safe_exec.py:165–183

Build a restricted __builtins__ dict for sandboxed exec(). Only includes computational builtins from the whitelist. Dangerous capabilities (eval, exec, open, getattr, type, __import__, etc.) are excluded by default. Args: extra_allowed: additional builtin names to incl

(extra_allowed: Optional[Set[str]] = None)

def build_safe_builtins(extra_allowed: Optional[Set[str]] = None) -> Dict[str, Any]:
    """
    Build a restricted __builtins__ dict for sandboxed exec().

    Only includes computational builtins from the whitelist.
    Dangerous capabilities (eval, exec, open, getattr, type, __import__, etc.)
    are excluded by default.

    Args:
        extra_allowed: additional builtin names to include (use with caution)
    """
    allowed = _BUILTINS_WHITELIST | (extra_allowed or set())
    safe = {}
    for name in allowed:
        val = getattr(_builtins_mod, name, None)
        if val is not None:
            safe[name] = val
    safe['__import__'] = _make_safe_import()
    return safe


# ── Timeout (cross-platform) ──────────────────────────────────────────────