These collection utility methods from DefaultGroovyMethods are currently whitelisted:

• any
• collect
• every
• find
• findAll
• max
• min

However, only the overloads taking a closure as an argument are whitelisted. There are also overloads that don't take a closure (calling which is equivalent to passing Closure.IDENTITY as the argument). I think those should be whitelisted as well.