Fixed #35735 -- Enabled template access to methods and properties of classes with __class_get_item__.

1 files changed, 4 insertions, 0 deletions

diff --git a/django/template/base.py b/django/template/base.py
index 0f1eca58db..ee2e145c04 100644
--- a/django/template/base.py
+++ b/django/template/base.py
@@ -880,6 +880,10 @@ class Variable:
         try:  # catch-all for silent variable failures
             for bit in self.lookups:
                 try:  # dictionary lookup
+                    # Only allow if the metaclass implements __getitem__. See
+                    # https://docs.python.org/3/reference/datamodel.html#classgetitem-versus-getitem
+                    if not hasattr(type(current), "__getitem__"):
+                        raise TypeError
                     current = current[bit]
                     # ValueError/IndexError are for numpy.array lookup on
                     # numpy < 1.9 and 1.9+ respectively