Thread:Extension talk:CirrusSearch/Is it possible for CirrusSearch to NOT require dynamic scripting?/reply (5)

Yes, we switched to using Groovy with 1.3 so things are sandboxed. We then can configure our Elasticsearch to only allow the things we need. See here for what we did in production.