We proxy the elasticsearch connection through the server and sanitize the request. Some installations also add more filters like permissions filter.

In future releases, we're going to improve on this. Stay tuned!