Phalcon Volt Sandbox Mode: Which Constructs Are Blocked and How Are Custom Functions Whitelisted?
I'm evaluating Volt's sandbox mode for rendering templates from semi-trusted sources in a Phalcon 4.x application. The documentation states that $volt->setOptions(['sandbox' => true]) restricts execution to a whitelist of tags and functions, and that disallowed constructs raise a sandbox violation at compile time. What I cannot pin down is the exact bo