This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/struts.git
The following commit(s) were added to refs/heads/master by this push:
new 35e63db add 'java.lang.Thread' to struts.excludedClasses
new 49bc941 Merge pull request #488 from sullis/disallow-java-lang-Thread
35e63db is described below
commit 35e63dbf65d0b52855c51e09e7c48eb09848fa6e
Author: Sean C. Sullivan <git...@seansullivan.com>
AuthorDate: Thu Jun 3 07:36:16 2021 -0700
add 'java.lang.Thread' to struts.excludedClasses
---
core/src/main/resources/struts-default.xml | 1 +
1 file changed, 1 insertion(+)
diff --git a/core/src/main/resources/struts-default.xml
b/core/src/main/resources/struts-default.xml
index 045d453..22d11ae 100644
--- a/core/src/main/resources/struts-default.xml
+++ b/core/src/main/resources/struts-default.xml
@@ -45,6 +45,7 @@
java.lang.ClassLoader,
java.lang.Shutdown,
java.lang.ProcessBuilder,
+ java.lang.Thread,
sun.misc.Unsafe,
com.opensymphony.xwork2.ActionContext" />
