Add test that prevents bypassing the JinjavaBeanELResolver's class

jasmith-hs · jasmith-hs · commit 03758f3a30dc · 2026-01-29T18:22:58.000-05:00
restrictions
diff --git a/src/test/java/com/hubspot/jinjava/lib/tag/ForTagTest.java b/src/test/java/com/hubspot/jinjava/lib/tag/ForTagTest.java
@@ -406,6 +406,15 @@ public void forLoopTupleWithNullValues() {
     assertThat(result).isEqualTo(" -1  -1  null  null  null ");
   }
 
+  @Test
+  public void itUsesJinjavaRestrictedResolverOnReadingLoopVars() {
+    String template =
+      """
+      {% for _, config, class in ____int3rpr3t3r____ %}{{ class }}{% endfor %}""";
+    String result = interpreter.render(template);
+    assertThat(result).isEqualTo("");
+  }
+
   public static boolean inForLoop() {
     JinjavaInterpreter interpreter = JinjavaInterpreter.getCurrent();
     return interpreter.getContext().isInForLoop();
