2010/8/23 Michael Foord fuzzyman@voidspace.org.uk:
To me hasattr *looks* like a passive introspection function, and the fact that it can trigger arbitrary code execution is unfortunate - especially because a full workaround is pretty arcane.
That's the danger of a dynamic language like Python. Even dir() can now trigger things like that.