moo.core.tests.test_security_random.test_random_no_format_methods

moo.core.tests.test_security_random.test_random_no_format_methods()

Random objects don’t expose format/format_map methods.

Attack path: if random.Random() had .format(), it might bypass safe_getattr guards like str.format does (blocked separately for strings only).

Result: Random objects are not strings and don’t have format methods. The str.format guard in safe_getattr only applies to str types.