CVE-2020-2110: Improper Input Validation in Jenkins Script Security Plugin

The vulnerability stems from incomplete AST annotation validation during script compilation. The commit diff shows critical additions to RejectASTTransformsCustomizer where super.visitImports() and super.visitAnnotations() calls were added to ensure proper traversal of nested AST nodes. This indicates the original implementation failed to: 1) Check for AST transforms in import statements (e.g., '@Grab' in 'import @Grab com.example'), and 2) Validate annotations nested within other annotations. The test cases added in SandboxInterceptorTest.java specifically target these scenarios, confirming these were the vulnerable pathways.