Backport PR #14029: Allow safe access to the `__getattribute__` method of modules

IPython/core/guarded_eval.py

@@ -637,6 +637,7 b' set_non_mutating_methods = set(dir(set)) & set(dir(frozenset))'
 
 dict_keys: Type[collections.abc.KeysView] = type({}.keys())
 method_descriptor: Any = type(list.copy)
+module = type(builtins)
 
 NUMERICS = {int, float, complex}
 
@@ -686,6 +687,7 b' BUILTIN_GETATTR: Set[MayHaveGetattr] = {'
     *NUMERICS,
     dict_keys,
     method_descriptor,
+    module,
 }
 
 

IPython/core/tests/test_guarded_eval.py

@@ -568,3 +568,15 b' def test_assumption_named_tuples_share_getitem():'
         pass
 
     assert A.__getitem__ == B.__getitem__
+
+
[e-mail]_without("numpy")
+def test_module_access():
+    import numpy
+
+    context = limited(numpy=numpy)
+    assert guarded_eval("numpy.linalg.norm", context) == numpy.linalg.norm
+
+    context = minimal(numpy=numpy)
+    with pytest.raises(GuardRejection):
+        guarded_eval("np.linalg.norm", context)