From 9fcbd912bc9ba8eed1ca9bc9422daf79d8b2f6ac Mon Sep 17 00:00:00 2001
From: Lukasz Lenart <lukaszlenart@apache.org>
Date: Thu, 21 Jun 2018 08:20:11 +0200
Subject: [PATCH] Adds more general exclusion

---
 core/src/main/resources/struts-default.xml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/core/src/main/resources/struts-default.xml b/core/src/main/resources/struts-default.xml
index 01453db8e..4882804e0 100644
--- a/core/src/main/resources/struts-default.xml
+++ b/core/src/main/resources/struts-default.xml
@@ -50,7 +50,6 @@
                 ognl.TypeConverter,
                 ognl.MemberAccess,
                 ognl.DefaultMemberAccess,
-                com.opensymphony.xwork2.ognl.SecurityMemberAccess,
                 com.opensymphony.xwork2.ActionContext" />
 
     <!-- this must be valid regex, each '.' in package name must be escaped! -->
@@ -67,7 +66,9 @@
                 freemarker.ext.rhino.,
                 freemarker.ext.beans.,
                 sun.reflect.,
-                javassist." />
+                javassist.,
+                com.opensymphony.xwork2.ognl.,
+                com.opensymphony.xwork2.security." />
 
     <bean class="com.opensymphony.xwork2.ObjectFactory" name="struts"/>
     <bean type="com.opensymphony.xwork2.factory.ResultFactory" name="struts" class="org.apache.struts2.factory.StrutsResultFactory" />