updates

Author: ogenstad

infrahub_sdk/template/__init__.py

@@ -15,6 +15,7 @@
 from .exceptions import (
     JinjaTemplateError,
     JinjaTemplateNotFoundError,
+    JinjaTemplateOperationViolationError,
     JinjaTemplateSyntaxError,
     JinjaTemplateUndefinedError,
 )
@@ -70,6 +71,11 @@ def get_variables(self) -> list[str]:
             template_source = env.loader.get_source(env, self._template)[0]
 
         template = env.parse(template_source)
+        if self.is_string_based and any(
+            node.__class__.__name__ in ["Call", "Import", "Include"] for node in template.body
+        ):
+            raise JinjaTemplateOperationViolationError()
+
         return sorted(meta.find_undeclared_variables(template))
 
     async def render(self, variables: dict[str, Any]) -> str:

infrahub_sdk/template/exceptions.py

@@ -31,3 +31,8 @@ class JinjaTemplateUndefinedError(JinjaTemplateError):
     def __init__(self, message: str | None, errors: list[UndefinedJinja2Error]) -> None:
         self.message = message or "Undefined Error"
         self.errors = errors
+
+
+class JinjaTemplateOperationViolationError(JinjaTemplateError):
+    def __init__(self, message: str | None = None) -> None:
+        self.message = message or "Forbidden code found in the template"