=== Testing semantic-kernel 1.39.3 (is_fixed=False) === === ORIGINAL VULNERABILITY TESTS === [FAIL] Original __class__: 'str' object has no attribute '__name__' [VULN] Original __dict__: Filter executed (expected in vuln version) [FAIL] Original __mro__: 'str' object has no attribute '__mro__' === VARIANT TESTS: Subscript Access === [FAIL] Subscript __class__: 'TestDataModel' object is not subscriptable [VULN] Subscript dict access: Filter executed (expected in vuln version) === VARIANT TESTS: Function Result Chaining === [FAIL] len().__class__: Use of name 'len' is not allowed in filter expressions. Only the lambda paramete [FAIL] str().__class__: Use of name 'str' is not allowed in filter expressions. Only the lambda paramete [FAIL] int().__class__: Use of name 'int' is not allowed in filter expressions. Only the lambda paramete === VARIANT TESTS: Literal Access === [VULN] List literal __class__: Filter executed (expected in vuln version) [VULN] Dict literal __class__: Filter executed (expected in vuln version) [VULN] Tuple literal __class__: Filter executed (expected in vuln version) [VULN] String literal __class__: Filter executed (expected in vuln version) [VULN] Int literal __class__: Filter executed (expected in vuln version) === VARIANT TESTS: Nested/Indirect Access === [VULN] Content __class__: Filter executed (expected in vuln version) [FAIL] Content __dict__: 'str' object has no attribute '__dict__' === VARIANT TESTS: Alternative Dunder Attributes === [FAIL] __weakref__: Function 'hasattr' is not allowed in filter expressions. Allowed functions: abs, [VULN] __doc__: Filter executed (expected in vuln version) [VULN] __hash__: Filter executed (expected in vuln version) [VULN] __eq__: Filter executed (expected in vuln version) [VULN] __repr__: Filter executed (expected in vuln version) [VULN] __str__: Filter executed (expected in vuln version) [VULN] __format__: Filter executed (expected in vuln version) [VULN] __sizeof__: Filter executed (expected in vuln version) === VARIANT TESTS: String Method Chains === [VULN] Upper then __class__: Filter executed (expected in vuln version) [VULN] Strip then __class__: Filter executed (expected in vuln version) === VARIANT TESTS: Subscript on Function Results === [FAIL] Get keys: 'TestDataModel' object has no attribute 'keys' [FAIL] Get values: 'TestDataModel' object has no attribute 'values' [FAIL] Get items: 'TestDataModel' object has no attribute 'items' === VARIANT TESTS: Missing Blocklist Items === [FAIL] __wrapped__: Function 'hasattr' is not allowed in filter expressions. Allowed functions: abs, [FAIL] __code__ via func: Function 'hasattr' is not allowed in filter expressions. Allowed functions: abs, [FAIL] __closure__ via func: Function 'hasattr' is not allowed in filter expressions. Allowed functions: abs, === VARIANT TESTS: Type-based Introspection === [FAIL] type() access: Function 'type' is not allowed in filter expressions. Allowed functions: abs, al [FAIL] type().__name__: Function 'type' is not allowed in filter expressions. Allowed functions: abs, al [FAIL] type().__mro__: Function 'type' is not allowed in filter expressions. Allowed functions: abs, al [FAIL] type().__subclasses__: Function 'hasattr' is not allowed in filter expressions. Allowed functions: abs, === VARIANT TESTS: Container Manipulation === [FAIL] List append: Function 'append' is not allowed in filter expressions. Allowed functions: abs, [FAIL] List extend: Function 'extend' is not allowed in filter expressions. Allowed functions: abs, [VULN] Dict get: Filter executed (expected in vuln version) ======================================== Results for VULNERABLE version (1.39.3): Tests that should pass: 38 (Baseline for comparison)