moo.core.tests.test_security_model_verb.testinvoked_name_write_blocked
- moo.core.tests.test_security_model_verb.testinvoked_name_write_blocked(t_init, t_wizard)
Verb._invoked_name is an underscore-prefixed instance attribute. _write_.__setattr__ must block verb code from overwriting it, preventing an attacker from redirecting passthrough() to an arbitrary verb name. RestrictedPython rejects _-prefixed attribute names at compile time (code.code is None), so exec raises TypeError; either way access is denied.