Dangerous operations are gated behind environment variables.
| Env Variable | Effect |
|---|---|
DRY_ALLOW_CMD=echo,cat | Only allows cmd / sys.run to execute these specific commands. |
DRY_ALLOW_DB=1 | Unlocks the db and dbpool database functions. |
DRY_ALLOW_URL=api.example.com | Unlocks req to only call the specified host. |
DRY_CORS_ORIGIN=https://app.example.com | Sets CORS headers natively for the op web server. |
If you run a script normally:
If the script contains cmd("rm -rf /"), it will automatically crash with cmd denied.
To unlock it specifically during development: