elasticsearch/elasticsearch — pull request #6596 by dakrone (2014-06-23 14:40:35+00:00)
Title: Add Groovy sandboxing for GString-based method invocation

This forbids things like:

```
obj."${'get' + 'Class'}"()."${'getDeclared' + 'Method'}"("myPrivateMethod")."${'set' + 'Accessible'}"(true)
```