Sketch of script sandbox integration
Bit more realistic whitelist
pointless rethrow
Fixing configuration of sandbox field.
Merge branch 'script-security' of github.com:jenkinsci/workflow-plugin into script-security
Resurrecting a test case from WiP local branch
Fixing up compiler errors
Need to call accessRejected if the method is not whitelisted.
Merge branch 'script-security' of github.com:jenkinsci/workflow-plugin into script-security
Another call to configuring should be skipped when in sandbox mode.
No apparent need for CpsWhitelist.
Needs a newer version of script-security

... which bundles newer version of groovy-sandbox
Verify that we can call a method defined in our script without special approval.
To make this pass, see wrapperWhitelist in: https://github.com/jenkinsci/script-security-plugin/commit/6b2c8b6
Merge branch 'script-security' of github.com:jenkinsci/workflow-plugin into script-security
Merge branch 'master' into script-security
Comment.
To execute CPS-transformed code through sandbox interceptor, those two needs to collaborate.

The custom invoker makes sure that CPS interpreter doesn't call into Groovy methods directly, and instead goes through sandbox checker
Fixed loose-ends in script security integration

- everything defined in user script is OK to invoke, which means we need to keep track of the classloader used to load them
- new CpsThread created via body invoaction of a step needs to execute in the sandbox mode
Using a method that's more likely rejected.

Object.toString() might get approved out of the box because it sounds benign
Relying on a released version