Script security

[barnslig]

There is an inline script used to only add server entries to an already existing file if it does not also already exists:

torture/crawler/elasticsearch.go

Line 113 in 0a09336

"script": "ctx._source.Servers.contains(Server) ? (ctx.op = \"none\") : (ctx._source.Servers += Server)",

As of ElasticSearch 2.x (or maybe even further), inline groovy scripts are considered insecure and thus disabled by default. Currently we circumvent this by manually enableing inline groovy scripts again.

Task: Find out how to accomplish the same in a secure manner.