From 2b23b8d663ecc359ff82b280d5c2b5168879f200 Mon Sep 17 00:00:00 2001 From: Ankush Menat Date: Tue, 2 Jan 2024 12:49:20 +0530 Subject: [PATCH] fix: validate server scripts with FrappeTransformer (#24068) --- frappe/core/doctype/server_script/server_script.py | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/frappe/core/doctype/server_script/server_script.py b/frappe/core/doctype/server_script/server_script.py index a9e047d9b2..fbd3ca6f50 100644 --- a/frappe/core/doctype/server_script/server_script.py +++ b/frappe/core/doctype/server_script/server_script.py @@ -8,7 +8,13 @@ import frappe from frappe import _ from frappe.model.document import Document from frappe.rate_limiter import rate_limit -from frappe.utils.safe_exec import NamespaceDict, get_safe_globals, is_safe_exec_enabled, safe_exec +from frappe.utils.safe_exec import ( + FrappeTransformer, + NamespaceDict, + get_safe_globals, + is_safe_exec_enabled, + safe_exec, +) class ServerScript(Document): @@ -123,7 +129,7 @@ class ServerScript(Document): from RestrictedPython import compile_restricted try: - compile_restricted(self.script) + compile_restricted(self.script, policy=FrappeTransformer) except Exception as e: frappe.msgprint(str(e), title=_("Compilation warning"))