SafeTrap

Sets the opcodes that will be trapped (disabled) in the

Safe  module.

Synopsis

The default is ":base_io".

Scope

This directive is only available for use in the global (interchange.cfg) configuration file, and will affect all websites running under the Interchange installation.  It will not work in a website's local (catalog.cfg) configuration file. 

Description

This directive allows you to set opcodes that will be "trapped" (disabled) by the

Safe  module.  Trapped Safe opcodes cannot be used in embedded Perl and conditional operations.

The default is ":base_io", which disables various filehandle-based input and output operations.  You can define declare the directive with no opcodes to not disable anything, but that would be unwise from a security standpoint.

See the

Opcode  module documentation for a list of valid opcodes.

Note The SafeUntrap directive's value is evaluated after this directive.  If you specify duplicate opcode(s) with the SafeUntrap directive then that directive will take priority over this one, and the duplicate opcode(s) will not be trapped (disabled) by the Safe  module.

Example