BZ-991058 - KIE workbench uses MVEL.eval() with unfiltered user input (arbitrary Java code execution is possible)

(cherry picked from commit 3883240d8324d0aa1372fff90c227928423c6a95)