Patched code sample

def execute_sanitized_python_code(user_code: str):
    """
    Executes user-provided Python code in a restricted environment to prevent
    sandbox escapes, representing a conceptual fix for a vulnerability like
    the one described.
    """
    # Define a whitelist of safe built-in functions.
    # Dangerous functions like `open`, `__import__`, `eval`, and `exec` are excluded.
    safe_builtins = {
        "print": print,
        "len": len,
        "str": str,
        "int": int,
        "float": float,
        "list": list,
        "dict": dict,
        "set": set,
        "tuple": tuple,
        "range": range,
        "abs": abs,
        "round": round,
        "sum": sum,
        "min": min,
        "max": max,
        "sorted": sorted,
    }

    # The environment for the user code. The `__builtins__` key is crucial.
    # By explicitly setting it, we replace the default, unrestricted built-ins
    # with our curated safe dictionary.
    restricted_environment = {
        "__builtins__": safe_builtins,
    }

    # Execute the user's code within the heavily restricted environment.
    # Any attempt to use a function not in `safe_builtins` (e.g., __import__)
    # will raise a NameError, preventing the sandbox escape.
    try:
        exec(user_code, restricted_environment, restricted_environment)
    except Exception as e:
        # In a real application, this error would be logged and reported.
        print(f"Code execution failed: {e}")