title: Securing Smarty -> any way of getting all assigned variables?
body: <p>I've created an extra layer where users can use own Smarty code in a sort of HTML template module, but I need to be sure it's save. </p>
  
  <p>So far I've disabled use of <code>{php}</code>-tags and only <code>{$smarty.now}</code> is accessible. I'm wondering if there is a way, because of the existence of Smarty in the template, to get all assigned variables to the template? If so, how is a list of all assigned variables requested so I can develop a check for that and exclude it from being parsed (means: left out the tpl-source once submitted by the user).</p>
  
  <p>Any help or contributions which I'm overlooking for 'securing'/limiting Smarty-access is greatly appreciated.</p>