From b4e5bf95a46a0f9025403be1c587f2822d18030e Mon Sep 17 00:00:00 2001
From: CREDO23 <bakerathierry@gmail.com>
Date: Wed, 27 May 2026 14:23:17 +0200
Subject: [PATCH] feat(automation): add template filter and test allowlist

---
 .../app/automations/templating/allowlist.py   | 31 +++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 surfsense_backend/app/automations/templating/allowlist.py

diff --git a/surfsense_backend/app/automations/templating/allowlist.py b/surfsense_backend/app/automations/templating/allowlist.py
new file mode 100644
index 000000000..ed0103c8f
--- /dev/null
+++ b/surfsense_backend/app/automations/templating/allowlist.py
@@ -0,0 +1,31 @@
+"""Filter and test names admitted into the sandboxed environment."""
+
+from __future__ import annotations
+
+ALLOWED_FILTERS: tuple[str, ...] = (
+    "default",
+    "first",
+    "join",
+    "last",
+    "length",
+    "lower",
+    "replace",
+    "reverse",
+    "sort",
+    "tojson",
+    "trim",
+    "truncate",
+    "upper",
+    "date",
+    "slugify",
+)
+
+ALLOWED_TESTS: tuple[str, ...] = (
+    "defined",
+    "none",
+    "number",
+    "string",
+    "mapping",
+    "sequence",
+    "boolean",
+)