[struts] branch WW-2815-xstream updated: WW-2815 Drops clearing existing permissions to avoid messing with user provided configuration

[lukaszlenart]

This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch WW-2815-xstream
in repository https://gitbox.apache.org/repos/asf/struts.git


The following commit(s) were added to refs/heads/WW-2815-xstream by this push:
     new 339c30320 WW-2815 Drops clearing existing permissions to avoid messing 
with user provided configuration
339c30320 is described below

commit 339c30320af03e80c36dd878c53cce0a946865b2
Author: Lukasz Lenart <lukaszlen...@apache.org>
AuthorDate: Mon Oct 17 10:14:51 2022 +0200

    WW-2815 Drops clearing existing permissions to avoid messing with user 
provided configuration
---
 .../src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java  | 3 ---
 1 file changed, 3 deletions(-)

diff --git 
a/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java
 
b/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java
index 5958ff5c9..d4d40221d 100644
--- 
a/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java
+++ 
b/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java
@@ -72,9 +72,6 @@ public class XStreamHandler extends 
AbstractContentTypeHandler {
             stream = new XStream(new StaxDriver());
         }
 
-        LOG.debug("Clears existing permissions");
-        stream.addPermission(NoTypePermission.NONE);
-
         LOG.debug("Adds per action permissions");
         addPerActionPermission(invocation, stream);