In particular, ElasticSearch offers the possibility to include snippets of scripts from a number of languages (e.g. Groovy) in your search. If you do so, the fi

In particular, ElasticSearch offers the possibility to include snippets of scripts from a number of languages (e.g. Groovy) in your search. If you do so, the file-access capability of those languages remains available. I'd be surprised if it's an issue these days, because: 1. It's disabled by default, and has been for a while. 2. If you do turn it on, the config options let you be more specific about where those scripts are allowed to come from.