Can we throw a try catch around the evaluate to log an exception messages, but throw a sanitized exception message.

While, just me being paranoid, I worry about using eval with unvalidated user input for security reasons.  This may be my ignorance of groovy shell, but I just want to make sure that a malicious query string couldn't do something such as make IO calls (web calls, create files, etc.)