(struts) 01/01: WW-5364 Add missing system allowlist classes

[kusal]

This is an automated email from the ASF dual-hosted git repository.

kusal pushed a commit to branch WW-5364-fix-map-access
in repository https://gitbox.apache.org/repos/asf/struts.git

commit 5aeecd2d1b123dab2cd2a36a5b2ccf7ab64815c1
Author: Kusal Kithul-Godage <g...@kusal.io>
AuthorDate: Mon Dec 18 10:59:25 2023 +1100

    WW-5364 Add missing system allowlist classes
---
 .../main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java    | 2 ++
 1 file changed, 2 insertions(+)

diff --git 
a/core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java 
b/core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
index 4600c6f37..1ef638ddd 100644
--- a/core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
+++ b/core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
@@ -68,6 +68,8 @@ public class SecurityMemberAccess implements MemberAccess {
     private static final Set<Class<?>> ALLOWLIST_REQUIRED_CLASSES = 
unmodifiableSet(new HashSet<>(Arrays.asList(
             java.lang.Enum.class,
             java.util.Date.class,
+            java.util.Map.class,
+            java.util.Map.Entry.class,
             java.util.HashMap.class
     )));