Next: Sharing data between active parts   Previous: An example   Contents: Contents

Security

Security is kept by running active contents in a safe environment via a Safe object if requested. This way every translator can implement its own grade of security, allowing only such operations which seem to be uncritical to the author.

Nevertheless, the necessary security grade may vary. Imagine a downloaded presentation source and a self written document. But even with own presentations it seems to be good advice to never translate a presentation with root permissions.

There are a few limitations in using Safe, especially if code wants to use modules. If security is not an issue, it's possible to bypass Safe completely. That's why embedded code can perform whatever operation Perl provides, but without any security restrictions. It's up to you to make your choice.

If active contents is disabled at all, all related PerlPoint elements (conditions, embedded and included code) are ignored.

Please refer to the specific translators documentation. Implementations can vary from generally disabled active contents to user configurable security settings.

Next: Sharing data between active parts   Previous: An example   Contents: Contents