{"record":{"id":"102d7b6612a1ef28","repo":"cube-js/cube","slug":"insecure-call","errorCode":null,"errorMessage":"insecure call","messagePattern":"insecure call","errorType":"exception","errorClass":"minijinja::Error","httpStatus":null,"severity":"error","filePath":"packages/cubejs-backend-native/src/template/mj_value/value.rs","lineNumber":40,"sourceCode":"}\n\nimpl SeqObject for JinjaSequenceObject {\n    fn get_item(&self, idx: usize) -> Option<Value> {\n        self.inner.get(idx).map(|v| to_minijinja_value(v.clone()))\n    }\n\n    fn item_count(&self) -> usize {\n        self.inner.len()\n    }\n}\n\nimpl Object for JinjaSequenceObject {\n    fn kind(&self) -> ObjectKind<'_> {\n        ObjectKind::Seq(self)\n    }\n\n    fn call(&self, _state: &mj::State, _args: &[Value]) -> Result<Value, mj::Error> {\n        Err(mj::Error::new(\n            minijinja::ErrorKind::InvalidOperation,\n            \"insecure call\",\n        ))\n    }\n\n    fn call_method(\n        &self,\n        _state: &mj::State,\n        _name: &str,\n        _args: &[Value],\n    ) -> Result<Value, mj::Error> {\n        Err(mj::Error::new(\n            minijinja::ErrorKind::InvalidOperation,\n            \"insecure method call\",\n        ))\n    }\n}\n","sourceCodeStart":22,"sourceCodeEnd":58,"githubUrl":"https://github.com/cube-js/cube/blob/7d981676b36392fec34088b9afab6bdcad40207c/packages/cubejs-backend-native/src/template/mj_value/value.rs#L22-L58","documentation":"A security sentinel guard: a Python/Jinja sequence object exposed to templates was used in call position (e.g. {{ mylist(...) }}). Sequence objects are only indexable/iterable from Jinja; making them callable could execute arbitrary underlying code, so invocation is rejected with this fixed message.","triggerScenarios":"Thrown at packages/cubejs-backend-native/src/template/mj_value/value.rs:40 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Index or iterate the sequence instead of calling it, e.g. {{ mylist[0] }} or {% for x in mylist %}","Expose a proper function object if calling is genuinely needed"],"exampleFix":null,"handlingStrategy":"type-guard","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"7d981676b36392fec34088b9afab6bdcad40207c","analyzedAt":"2026-09-02T03:45:10.400Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-08T15:18:49.778Z"}