This is an automated email from the ASF dual-hosted git repository.
kusal pushed a commit to branch kusal-experimental-2
in repository https://gitbox.apache.org/repos/asf/struts.git
commit 076d5acc1f62327068afab15868e8da154fd2faa
Merge: 9267ce638 d71bcb5af
Author: Kusal Kithul-Godage <g...@kusal.io>
AuthorDate: Sun Jul 14 00:28:20 2024 +1000
Merge branch 'refs/heads/kusal-experimental' into kusal-experimental-2
# Conflicts:
#
core/src/main/java/com/opensymphony/xwork2/config/providers/XmlDocConfigurationProvider.java
.../xwork2/config/providers/XmlDocConfigurationProvider.java | 12 ++++++------
.../src/main/java/com/opensymphony/xwork2/ognl/OgnlUtil.java | 11 +----------
.../com/opensymphony/xwork2/ognl/SecurityMemberAccess.java | 6 ++++++
3 files changed, 13 insertions(+), 16 deletions(-)
diff --cc
core/src/main/java/com/opensymphony/xwork2/config/providers/XmlDocConfigurationProvider.java
index fbdcb47de,5c1d1f395..53baf52db
---
a/core/src/main/java/com/opensymphony/xwork2/config/providers/XmlDocConfigurationProvider.java
+++
b/core/src/main/java/com/opensymphony/xwork2/config/providers/XmlDocConfigurationProvider.java
@@@ -148,7 -149,10 +148,8 @@@ public abstract class XmlDocConfigurati
protected Class<?> allowAndLoadClass(String className) throws
ClassNotFoundException {
Class<?> clazz = loadClass(className);
- allowlistClasses.add(clazz);
- allowlistClasses.addAll(ClassUtils.getAllSuperclasses(clazz));
- allowlistClasses.addAll(ClassUtils.getAllInterfaces(clazz));
+ allowlistClasses.addAll(ConfigurationUtil.getAllClassTypes(clazz));
+ providerAllowlist.registerAllowlist(this, allowlistClasses);
return clazz;
}
