commit 49bc9417645450d7590fc77ef5dc68887b19fa58
author Lukasz Lenart <lukaszlenart@apache.org> Mon Jun 07 06:36:26 2021 +0200
committer GitHub <noreply@github.com> Mon Jun 07 06:36:26 2021 +0200
tree 0be8d098e85993e722004404c3ad428c0afdab72
parent 64eaff102a0c5c695070eafe8a921f22669bbe09
parent 35e63dbf65d0b52855c51e09e7c48eb09848fa6e

Merge pull request #488 from sullis/disallow-java-lang-Thread

add 'java.lang.Thread' to struts.excludedClasses

core/src/main/resources/struts-default.xml

diff --git a/core/src/main/resources/struts-default.xml b/core/src/main/resources/struts-default.xml
index 045d453..22d11ae 100644
--- a/core/src/main/resources/struts-default.xml
+++ b/core/src/main/resources/struts-default.xml
@@ -45,6 +45,7 @@
                 java.lang.ClassLoader,
                 java.lang.Shutdown,
                 java.lang.ProcessBuilder,
+                java.lang.Thread,
                 sun.misc.Unsafe,
                 com.opensymphony.xwork2.ActionContext" />