Further improvements to the Twig SecurityPolicy

Author: Luke Towers

modules/system/twig/SecurityPolicy.php

@@ -18,10 +18,18 @@ final class SecurityPolicy implements SecurityPolicyInterface
      * @var array List of forbidden methods.
      */
     protected $blockedMethods = [
+        // \October\Rain\Extension\ExtendableTrait
         'addDynamicMethod',
         'addDynamicProperty',
+
+        // \October\Rain\Support\Traits\Emitter
         'bindEvent',
         'bindEventOnce',
+
+        // Eloquent & Halcyon data modification
+        'insert',
+        'update',
+        'delete',
     ];
 
     /**