From e54613f75feacd0d40e35b4064b842e03eabd821 Mon Sep 17 00:00:00 2001
From: Marty Sullivan <marty-sullivan@users.noreply.github.com>
Date: Thu, 3 Jul 2025 02:59:34 -0400
Subject: [PATCH] fix(Code Node): Only Block os.system vs Blocking import os
 (#16885)

---
 packages/nodes-base/nodes/Code/Pyodide.ts | 22 +++++-----------------
 1 file changed, 5 insertions(+), 17 deletions(-)

diff --git a/packages/nodes-base/nodes/Code/Pyodide.ts b/packages/nodes-base/nodes/Code/Pyodide.ts
index 240b5329601..12b8864c42a 100644
--- a/packages/nodes-base/nodes/Code/Pyodide.ts
+++ b/packages/nodes-base/nodes/Code/Pyodide.ts
@@ -28,30 +28,18 @@ export async function LoadPyodide(packageCacheDir: string): Promise<PyodideInter
 		)) as PyodideInterface;
 
 		await pyodideInstance.runPythonAsync(`
-blocked_modules = ["os"]
+import os
 
-import sys
-for module_name in blocked_modules:
-	del sys.modules[module_name]
+def blocked_system(*args, **kwargs):
+    raise RuntimeError("os.system is blocked for security reasons.")
+
+os.system = blocked_system
 
 from importlib.abc import MetaPathFinder
 from importlib.machinery import ModuleSpec
 from types import ModuleType
 from typing import Sequence, Optional
 
-class ImportBlocker(MetaPathFinder):
-	def find_spec(
-		self,
-		fullname: str,
-		path: Sequence[bytes | str] | None,
-		target: ModuleType | None = None,
-) -> Optional[ModuleSpec]:
-		if fullname in blocked_modules:
-				raise ModuleNotFoundError(f"Module {fullname!r} is blocked", name=fullname)
-		return None
-
-sys.meta_path.insert(0, ImportBlocker())
-
 from _pyodide_core import jsproxy_typedict
 from js import Object
 `);