This was a fun exercise! In the example, the sandbox is configured but not enabled ($sandbox->enableSandbox()). Therefore, the payload template={{['whoami']|map('system')|join}} works. However, it wouldn't work in enforced mode because the callable must be a closure function. #bugbounty #intigriti