k4n5ha0 opened a new pull request, #545:
URL: https://github.com/apache/struts/pull/545

   update function  isClassExcluded logic to 
clazz.isAssignableFrom(excludedClass) ||  excludedClass.isAssignableFrom(clazz)
   and
   Exclude java.lang.Cloneable beacause st062 exp's 
org.apache.commons.collections.BeanMap
   
   any dangerous class belone excludedClasses will Exclude in future
   
![image](https://user-images.githubusercontent.com/22064977/166302130-245767a9-f2a2-4c8e-a7db-8d8cc52c3be8.png)
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org

Reply via email to