8.125 Safe

Creates compartments for evaluating untrusted Perl code. Each compartment has an associated operator mask for excluding particular Perl operators from the compartment. See the Opcode module for more information on operators and operator masks. The default mask is applied during compilation to prevent all operations that give access to the system. Safe provides the following methods:

• new
• mask
• rdo
• reval
• root
• share
• trap
• untrap
• varglob

The following subroutines are available for export by Safe. The operator names can be found in the array op_name in the file opcode.h in the Perl distribution.

• emptymask
• fullmask
• mask_to_ops
• MAXO
• opcode
• op_mask
• opname
• ops_to_mask