use sandboxed env

prefix-dev · Aug 7, 2024 · f60441e · f60441e
1 parent 4d920bd
commit f60441e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/rattler_build_conda_compat/jinja/jinja.py b/src/rattler_build_conda_compat/jinja/jinja.py
@@ -3,6 +3,7 @@
 from typing import Any, TypedDict
 
 import jinja2
+from jinja2.sandbox import SandboxedEnvironment
 import yaml
 
 from rattler_build_conda_compat.jinja.filters import _bool, _split, _version_to_build_string
@@ -29,7 +30,7 @@ def jinja_env() -> jinja2.Environment:
     Target platform, build platform, and mpi are set to linux-64 by default.
     """
 
-    env = jinja2.Environment(
+    env = SandboxedEnvironment(
         variable_start_string="${{",
         variable_end_string="}}",
         trim_blocks=True,