cleverage/play2-elasticsearch — pull request #55 by jannylund (2014-08-05 12:52:43+00:00)
Title: Disable dynamic querys by default, to avoid remote code execution. 

Elasticsearch defaults to support dynamic querys, which introduces a risk for remote code execution. This is supposedly disabled by default in newer versions of ES, but for now, I suggest setting it to false in the default configuration is better than nothing.

For more information, please see http://bouk.co/blog/elasticsearch-rce/

Br,
Jan