(struts) 01/01: WW-5364 Add String.class to system allowlist

[kusal]

This is an automated email from the ASF dual-hosted git repository.

kusal pushed a commit to branch WW-5364-fix-str-access
in repository https://gitbox.apache.org/repos/asf/struts.git

commit bf1b32585eda236e817b217b72f6bacbd5f1865a
Author: Kusal Kithul-Godage <g...@kusal.io>
AuthorDate: Tue Jan 2 15:44:59 2024 +1100

    WW-5364 Add String.class to system allowlist
---
 .../main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git 
a/core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java 
b/core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
index 1ef638ddd..89f04c53e 100644
--- a/core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
+++ b/core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
@@ -70,7 +70,8 @@ public class SecurityMemberAccess implements MemberAccess {
             java.util.Date.class,
             java.util.Map.class,
             java.util.Map.Entry.class,
-            java.util.HashMap.class
+            java.util.HashMap.class,
+            java.lang.String.class
     )));
 
     private final ProviderAllowlist providerAllowlist;