This graph shows which files directly or indirectly include this file:

Macros
#define	PO_ALLOW_BARE_REFS PO_REQUIRE_BARE_REFS
	synonym for PO_REQUIRE_BARE_REFS

#define	PO_ALLOW_DEBUGGER (1LL << 51)
	allow the use debugger stuff

#define	PO_ALLOW_INJECTION (1LL << 36)
	allow code injection

#define	PO_ALLOW_STATEMENT_NO_EFFECT (1LL << 52)
	allow for old pre-Qore 0.9 top-level statements having no effect

#define	PO_ALLOW_WEAK_REFERENCES (1LL << 50)
	allow the use of the weak reference assignment operator ':='

#define	PO_ASSUME_LOCAL (1 << 28)
	assume local variable scope if not declared (implicit "my")

#define	PO_BROKEN_INT_ASSIGNMENTS (1LL << 41)
	allow for old pre-Qore 0.8.12 "int" restrictions to be ignored at runtime

#define	PO_BROKEN_LIST_PARSING (1LL << 39)
	allow for old pre-Qore 0.8.12 broken list rewriting in the parser

#define	PO_BROKEN_LOGIC_PRECEDENCE (1LL << 40)
	allow for old pre-Qore 0.8.12 precedence of logical and bitwise operators

#define	PO_BROKEN_LOOP_STATEMENT (1LL << 43)
	allow for old pre-Qore 0.8.13 handling of break and continue

#define	PO_BROKEN_OPERATORS (1LL << 42)
	allow for old pre-Qore 0.8.12 parsing of multi-character operators with spaces

#define	PO_BROKEN_REFERENCES (1LL << 47)
	allow for old pre-Qore 0.8.13 "reference" and "*reference" type restriction behavior where they accepted any type

#define	PO_BROKEN_SPRINTF (1LL << 55)
	enables pre-0.9 broken sprintf handling

#define	PO_DEFAULT 0
	no parse options set by default

#define	PO_FREE_OPTIONS
	mask of options that have no effect on code access or code safety

#define	PO_IN_MODULE (1LL << 33)
	do not use directly, this is set automatically in user module programs

#define	PO_INHERITANCE_OPTIONS (PO_USER_INHERITANCE_OPTIONS\|PO_SYSTEM_INHERITANCE_OPTIONS)
	mask of options that affect the way a child Program inherits code from the parent

#define	PO_LOCK_WARNINGS (1 << 17)
	do not allow programs to change the warning mask

#define	PO_LOCKDOWN (PO_NO_EXTERNAL_ACCESS\|PO_NO_THREADS\|PO_NO_IO\|PO_NO_REFLECTION)
	most restrictive access - can just execute logic, no I/O, no threading, no external access, no reflection

#define	PO_NEW_STYLE (PO_ALLOW_BARE_REFS\|PO_ASSUME_LOCAL)
	new Qore style: no more '$' and with assumed variable scope

#define	PO_NO_API PO_INHERITANCE_OPTIONS
	an alias of PO_INHERITANCE_OPTIONS

#define	PO_NO_CHILD_PO_RESTRICTIONS (1 << 11)
	turn off parse option inheritance restrictions

#define	PO_NO_CLASS_DEFS (1 << 5)
	cannot define new object classes

#define	PO_NO_CONSTANT_DEFS (1 << 7)
	cannot define new constants

#define	PO_NO_DATABASE (1 << 18)
	do not allow database access

#define	PO_NO_DEBUGGING (1LL << 46)
	disallows debugging actions that could be insecure such as reading the thread local variable stack

#define	PO_NO_EMBEDDED_LOGIC (1LL << 34)
	do not allow embedded logic or runtime parsing

#define	PO_NO_EXTERNAL_ACCESS (PO_NO_PROCESS_CONTROL\|PO_NO_NETWORK\|PO_NO_FILESYSTEM\|PO_NO_DATABASE\|PO_NO_EXTERNAL_INFO\|PO_NO_EXTERNAL_PROCESS\|PO_NO_MODULES\|PO_NO_UNCONTROLLED_APIS)
	prohibits any external access

#define	PO_NO_EXTERNAL_INFO (1 << 22)
	do not allow any access to host, process, etc information

#define	PO_NO_EXTERNAL_PROCESS (1 << 12)
	do not allow access to functionality that calls external processes: backquote op, system(), exec(), etc

#define	PO_NO_FILESYSTEM (1 << 16)
	do not allow any filesystem access (objects & subroutines)

#define	PO_NO_GLOBAL_VARS (1 << 0)
	cannot define new global variables

#define	PO_NO_GUI (1 << 19)
	do not allow any GUI-relevant actions to be performed

#define	PO_NO_INHERIT_GLOBAL_VARS (1LL << 32)
	do not inherit public global variables from the parent into the new program's space

#define	PO_NO_INHERIT_SYSTEM_CLASSES (1 << 9)
	do not inherit system classes into this program space

#define	PO_NO_INHERIT_SYSTEM_CONSTANTS (1LL << 38)
	do not inherit system constants from the parent into the new program's space

#define	PO_NO_INHERIT_SYSTEM_FUNC_VARIANTS (1LL << 31)
	do not inherit any builtin function variants to the new program's space

#define	PO_NO_INHERIT_SYSTEM_HASHDECLS (1LL << 49)
	do not inherit system hashdecls from the parent into the new program's space

#define	PO_NO_INHERIT_USER_CLASSES (1 << 10)
	do not inherit public user classes into this program space

#define	PO_NO_INHERIT_USER_CONSTANTS (1LL << 37)
	do not inherit user constants from the parent into the new program's space

#define	PO_NO_INHERIT_USER_FUNC_VARIANTS (1 << 30)
	do not inherit public user function variants from the parent into the new program's space

#define	PO_NO_INHERIT_USER_HASHDECLS (1LL << 48)
	do not inherit user hashdecls from the parent into the new program's space

#define	PO_NO_IO (PO_NO_GUI\|PO_NO_TERMINAL_IO\|PO_NO_FILESYSTEM\|PO_NO_NETWORK\|PO_NO_DATABASE\|PO_NO_UNCONTROLLED_APIS)
	prohibits all terminal and file I/O and GUI operations

#define	PO_NO_LOCALE_CONTROL (1 << 24)
	do not allow changes to program locale

#define	PO_NO_MODULES (1 << 29)
	do not allow external modules to be loaded

#define	PO_NO_NAMESPACE_DEFS (1 << 6)
	cannot define new namespaces

#define	PO_NO_NETWORK (1 << 15)
	do not allow any network access (objs & subroutines)

#define	PO_NO_NEW (1 << 8)
	cannot use the new operator (DEPRECATED: this option is not useful anymore because objects can be declared and created without "new")

#define	PO_NO_PROCESS_CONTROL (1 << 14)
	do not allow access to functionality that can affect the current process: fork(), exec(), abort(), etc

#define	PO_NO_REFLECTION (1LL << 53)
	disallow the use of reflection

#define	PO_NO_SUBROUTINE_DEFS (1 << 1)
	cannot define new user subroutines

#define	PO_NO_SYSTEM_API PO_SYSTEM_INHERITANCE_OPTIONS
	an alias of PO_SYSTEM_INHERITANCE_OPTIONS

#define	PO_NO_TERMINAL_IO (1 << 20)
	do not allow any terminal I/O to be performed

#define	PO_NO_THREAD_CLASSES (1 << 3)
	no access to thread classes

#define	PO_NO_THREAD_CONTROL (1 << 2)
	cannot launch new threads) use thread_exit) or access thread data

#define	PO_NO_THREAD_INFO (1 << 23)
	do not allow any access to thread information

#define	PO_NO_THREADS (PO_NO_THREAD_CONTROL\|PO_NO_THREAD_CLASSES\|PO_NO_THREAD_INFO)
	cannot access any thread functionality

#define	PO_NO_TOP_LEVEL_STATEMENTS (1 << 4)
	cannot define new top-level statements (outside of sub or class defs)

#define	PO_NO_TRANSIENT (1LL << 54)
	disables the transient keyword

#define	PO_NO_UNCONTROLLED_APIS (1LL << 45)
	disallow access to "uncontrolled APIs" like external language bindings or direct generic system call APIs that could bypass sandboxing controls

#define	PO_NO_USER_API PO_USER_INHERITANCE_OPTIONS
	an alias of PO_USER_INHERITANCE_OPTIONS

#define	PO_POSITIVE_OPTIONS (PO_NO_CHILD_PO_RESTRICTIONS\|PO_ALLOW_INJECTION\|PO_ALLOW_WEAK_REFERENCES\|PO_ALLOW_DEBUGGER)
	mask of all options allowing for more freedom (instead of less)

#define	PO_REQUIRE_BARE_REFS (1 << 27)
	do not allow '$' for vars and '$.' for class member refs

#define	PO_REQUIRE_OUR (1 << 13)
	require "our" for global var declaration

#define	PO_REQUIRE_PROTOTYPES (1 << 25)
	require types in method and function declarations

#define	PO_REQUIRE_TYPES (1 << 21)
	require type information for all declarations

#define	PO_STRICT_ARGS (1 << 26)
	do not allow access to RT_NOOP code or excess args

#define	PO_STRICT_BOOLEAN_EVAL (1LL << 35)
	do non-intuitive strict mathematical boolean evaluations (the Qore default prior to v0.8.6)

#define	PO_STRONG_ENCAPSULATION (1LL << 44)
	disallow out-of-line class and namespace declarations

#define	PO_SYSTEM_INHERITANCE_OPTIONS (PO_NO_INHERIT_SYSTEM_CLASSES\|PO_NO_INHERIT_SYSTEM_FUNC_VARIANTS\|PO_NO_INHERIT_SYSTEM_CONSTANTS\|PO_NO_INHERIT_SYSTEM_HASHDECLS)
	mask of options that affect the way a child Program inherits user code from the parent

#define	PO_SYSTEM_OPS (PO_IN_MODULE)
	all options that are set by the system

#define	PO_USER_INHERITANCE_OPTIONS (PO_NO_INHERIT_USER_CLASSES\|PO_NO_INHERIT_USER_FUNC_VARIANTS\|PO_NO_INHERIT_GLOBAL_VARS\|PO_NO_INHERIT_USER_CONSTANTS\|PO_NO_INHERIT_USER_HASHDECLS)
	mask of options that affect the way a child Program inherits user code from the parent

#define	QDOM_DATABASE PO_NO_DATABASE
	provides access to databases

#define	QDOM_DEBUGGER PO_ALLOW_DEBUGGER
	provides debugger functionality

#define	QDOM_DEFAULT 0
	the default domain (no domain)

#define	QDOM_EMBEDDED_LOGIC PO_NO_EMBEDDED_LOGIC
	provides dynamic parsing functionality

#define	QDOM_EXTERNAL_INFO PO_NO_EXTERNAL_INFO
	provides access to external information (ex: hostname, pid, process uid, etc)

#define	QDOM_EXTERNAL_PROCESS PO_NO_EXTERNAL_PROCESS
	provides external process control functionality (can affect) start) or stop external processes)

#define	QDOM_FILESYSTEM PO_NO_FILESYSTEM
	provides access to the filesystem

#define	QDOM_GUI PO_NO_GUI
	provides GUI functionality

#define	QDOM_IN_MODULE PO_IN_MODULE
	tagged with code that is restricted in user modules

#define	QDOM_INJECTION PO_ALLOW_INJECTION
	provides functionality related to code / dependency injection

#define	QDOM_LOCALE_CONTROL PO_NO_LOCALE_CONTROL
	provides access to functionality that changes locale information

#define	QDOM_MODULES PO_NO_MODULES
	provides access to external modules

#define	QDOM_NETWORK PO_NO_NETWORK
	provides network functionality

#define	QDOM_PROCESS PO_NO_PROCESS_CONTROL
	provides process control functionality (can affect or stop the current process)

#define	QDOM_REFLECTION PO_NO_REFLECTION
	provides reflection functionality

#define	QDOM_TERMINAL_IO PO_NO_TERMINAL_IO
	provides terminal I/O functionality

#define	QDOM_THREAD_CLASS PO_NO_THREAD_CLASSES
	provides thread control functionality

#define	QDOM_THREAD_CONTROL PO_NO_THREAD_CONTROL
	provides the ability to check or manipulate threads (including starting new threads)

#define	QDOM_THREAD_INFO PO_NO_THREAD_INFO
	provides access to information regarding threading (tid, active threads, etc)

#define	QDOM_UNCONTROLLED_API PO_NO_UNCONTROLLED_APIS
	provides unchecked access to system functionality that could bypass Qore's sandboxing controls

Detailed Description

defines parse restrictions and functional domains for builtin functions and qore class methods

Macros

Detailed Description