#392 MEDIUM: Sandbox bypass via cached sys.modules

sandbox/sandbox.py:99-132 - Replaces builtins.__import__ but doesn't clear sys.modules. Banned modules imported before sandbox context remain accessible. Fix: Clear sys.modules entries for banned modules before exec.