jinja2: Jinja has a sandbox breakout through indirect reference to format method · Teire