Adds more general exclusion

core/src/main/resources/struts-default.xml

@@ -50,7 +50,6 @@
                 ognl.TypeConverter,
                 ognl.MemberAccess,
                 ognl.DefaultMemberAccess,
-                com.opensymphony.xwork2.ognl.SecurityMemberAccess,
                 com.opensymphony.xwork2.ActionContext" />
 
     <!-- this must be valid regex, each '.' in package name must be escaped! -->
@@ -67,7 +66,9 @@
                 freemarker.ext.rhino.,
                 freemarker.ext.beans.,
                 sun.reflect.,
-                javassist." />
+                javassist.,
+                com.opensymphony.xwork2.ognl.,
+                com.opensymphony.xwork2.security." />
 
     <bean class="com.opensymphony.xwork2.ObjectFactory" name="struts"/>
     <bean type="com.opensymphony.xwork2.factory.ResultFactory" name="struts" class="org.apache.struts2.factory.StrutsResultFactory" />