Great article. One feature of the _search API endpoint is to allow users to submit Groovy code in the search query itself. The server will then execute the cod

Great article. One feature of the _search API endpoint is to allow users to submit Groovy code in the search query itself. The server will then execute the code in a sandboxed environment, returning the result to the user. This way, the elasticsearch code can be used to execute… more code. Quite a dangerous feature indeed. Thankfully, according to the documentation[0], this feature is disabled by default since v1.4.3. (Hindsight is 20/20, but this probably should have been the case from the get-go) 0. https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-scripting.html#modules-scripting https://www.elastic.co/guide/en/elasticsearch/reference/curr...