$secure_dir
$secure_dir : array
This is the list of template directories that are considered secure.
$template_dir is in this list implicitly.
An instance of a security policy
__construct(\Smarty $smarty)
Constructs a new security policy
\Smarty | $smarty | An instance of Brainy |
None found |
isTrustedPhpFunction(string $function_name, object $compiler) : boolean
Check if PHP function is trusted.
string | $function_name | The name of the PHP function |
object | $compiler | compiler object |
if php function is not trusted
true if function is trusted
None found |
isTrustedStaticClass(string $class_name, object $compiler) : boolean
Check if static class is trusted.
string | $class_name | The name of the static class |
object | $compiler | compiler object |
if static class is not trusted
true if class is trusted
None found |
isTrustedPhpModifier(string $modifier_name, object $compiler) : boolean
Check if PHP modifier is trusted.
string | $modifier_name | The name of the PHP function |
object | $compiler | compiler object |
if modifier is not trusted
true if modifier is trusted
None found |
isTrustedTag(string $tag_name, object $compiler) : boolean
Check if tag is trusted.
string | $tag_name | The name of the tag |
object | $compiler | compiler object |
if modifier is not trusted
true if tag is trusted
None found |
isTrustedModifier(string $modifier_name, object $compiler) : boolean
Check if modifier plugin is trusted.
string | $modifier_name | The name of the modifier |
object | $compiler | compiler object |
if modifier is not trusted
true if tag is trusted
None found |
isTrustedStream(string $stream_name) : boolean
Check if stream is trusted.
string | $stream_name | The name of the stream |
if stream is not trusted
true if stream is trusted
None found |
isTrustedResourceDir(string $filepath) : boolean
Check if directory of file resource is trusted.
string | $filepath | The file path to test |
if directory is not trusted
true if directory is trusted
None found |
isTrustedUri(string $uri) : boolean
Check if URI (e.g. {html_image}) is trusted
To simplify things, isTrustedUri() resolves all input to "{$PROTOCOL}://{$HOSTNAME}". So "http://username:password@hello.world.example.org:8080/some-path?some=query-string" is reduced to "http://hello.world.example.org" prior to applying the patters from \$trusted_uri.
string | $uri | The URI to test |
if URI is not trusted
true if URI is trusted
None found |