moo.core.tests.test_security_random.test_random_no_module_attributes
- moo.core.tests.test_security_random.test_random_no_module_attributes()
Random class attributes are functions/methods/constants, not modules.
Attack path: if random.Random had module attributes, they could be traversed Guard: ModuleType guard in safe_getattr would block submodule access
Result: Random’s public attributes (random, seed, getstate, etc.) are all callable methods or int constants - no module references exist. This test confirms the architectural fact by spot-checking key attributes.