add test for except star

.gitignore

@@ -9,8 +9,10 @@
 .coverage
 .coverage.*
 .eggs/
+.idea/
 .installed.cfg
 .mr.developer.cfg
+.python-version
 .tox/
 .vscode/
 __pycache__/

src/RestrictedPython/Guards.py

@@ -64,6 +64,7 @@
     'EOFError',
     'EnvironmentError',
     'Exception',
+    'ExceptionGroup',
     'FloatingPointError',
     'FutureWarning',
     'GeneratorExit',
@@ -107,7 +108,9 @@
     safe_builtins[name] = getattr(builtins, name)
 
 for name in _safe_exceptions:
-    safe_builtins[name] = getattr(builtins, name)
+    builtin = getattr(builtins, name, None)
+    if builtin:
+        safe_builtins[name] = getattr(builtins, name)
 
 
 # Wrappers provided by this module:

src/RestrictedPython/_compat.py

@@ -6,5 +6,6 @@
 IS_PY37_OR_GREATER = _version.major == 3 and _version.minor >= 7
 IS_PY38_OR_GREATER = _version.major == 3 and _version.minor >= 8
 IS_PY310_OR_GREATER = _version.major == 3 and _version.minor >= 10
+IS_PY311_OR_GREATER = _version.major == 3 and _version.minor >= 11
 
 IS_CPYTHON = platform.python_implementation() == 'CPython'

src/RestrictedPython/transformer.py

@@ -1127,6 +1127,10 @@ def visit_Try(self, node):
         """Allow `try` without restrictions."""
         return self.node_contents_visit(node)
 
+    def visit_TryStar(self, node):
+        """Allow `ExceptionGroup` without restrictions."""
+        return self.node_contents_visit(node)
+
     def visit_ExceptHandler(self, node):
         """Protect exception handlers."""
         node = self.node_contents_visit(node)

tests/transformer/test_try.py

@@ -1,4 +1,5 @@
 from RestrictedPython import compile_restricted_exec
+from RestrictedPython._compat import IS_PY311_OR_GREATER
 from tests.helper import restricted_exec
 
 
@@ -47,6 +48,31 @@ def test_RestrictingNodeTransformer__visit_Try__2(
     ])
 
 
+TRY_EXCEPT_STAR = """
+def try_except_star(m):
+    try:
+        m('try')
+        raise ExceptionGroup("group", [IndentationError('f1'), ValueError(65)])
+    except* IndentationError:
+        m('IndentetionError')
+    except* ValueError:
+        m('ValueError')
+"""
+
+
+def test_RestrictingNodeTransformer__visit_Try__3(mocker):
+    """It allows try-except statements."""
+    if IS_PY311_OR_GREATER:
+        trace = mocker.stub()
+        restricted_exec(TRY_EXCEPT_STAR)['try_except_star'](trace)
+
+        trace.assert_has_calls([
+            mocker.call('try'),
+            mocker.call('IndentetionError'),
+            mocker.call('ValueError')
+        ])
+
+
 TRY_FINALLY = """
 def try_finally(m):
     try: