I think it's very interesting that Google is brave enough to put this app out there from a security point of view. They are letting any random stranger without

I think it's very interesting that Google is brave enough to put this app out there from a security point of view. They are letting any random stranger without registration etc., run code inside their sandbox. For example, switch to groovy mode and enter: println new URL('http://www.google.com' http://www.google.com').openConnection().inputStream.text You'll see it fetches the web page and prints it out. So this app is now an anonymous proxy, of sorts, using Google's bandwidth to hit other sites. Of course, that is just the first thing that came into my head, but it seems to me there might be many ways someone evil could use this either directly to do bad things or to try and hack the app engine sandbox itself.