Merge pull request #1317 from HubSpot/jasmith_hubspot/named-param-allowlist

Add NamedParameter to JinjavaFunctions allowlist group

Author: jasmith-hs

src/main/java/com/hubspot/jinjava/el/ext/AllowlistGroup.java

@@ -156,7 +156,10 @@ String[] allowedReturnTypeCanonicalClassPrefixes() {
     }
   },
   JinjavaFunctions {
-    private static final String[] ARRAY = { ZonedDateTime.class.getCanonicalName() };
+    private static final String[] ARRAY = {
+      ZonedDateTime.class.getCanonicalName(),
+      NamedParameter.class.getCanonicalName(),
+    };
 
     @Override
     String[] allowedDeclaredMethodsFromClasses() {

src/test/java/com/hubspot/jinjava/el/ext/AllowlistGroupTest.java

@@ -0,0 +1,27 @@
+package com.hubspot.jinjava.el.ext;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import com.hubspot.jinjava.BaseJinjavaTest;
+import java.util.HashMap;
+import java.util.Map;
+import org.junit.Test;
+
+public class AllowlistGroupTest extends BaseJinjavaTest {
+
+  @Test
+  public void itResolvesNamedParameterNameThroughAllowlist() {
+    Map<String, Object> context = new HashMap<>();
+    context.put("np", new NamedParameter("greeting", "hello"));
+    String result = jinjava.render("{{ np.name }}", context);
+    assertThat(result).isEqualTo("greeting");
+  }
+
+  @Test
+  public void itResolvesNamedParameterValueThroughAllowlist() {
+    Map<String, Object> context = new HashMap<>();
+    context.put("np", new NamedParameter("greeting", "hello"));
+    String result = jinjava.render("{{ np.value }}", context);
+    assertThat(result).isEqualTo("hello");
+  }
+}