diff --git a/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java b/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java
index 5958ff5c9..d4d40221d 100644
--- a/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java
+++ b/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java
@@ -72,9 +72,6 @@ public class XStreamHandler extends AbstractContentTypeHandler {
             stream = new XStream(new StaxDriver());
         }
 
-        LOG.debug("Clears existing permissions");
-        stream.addPermission(NoTypePermission.NONE);
-
         LOG.debug("Adds per action permissions");
         addPerActionPermission(invocation, stream);