From: Markus Koschany <apo@debian.org>
Date: Wed, 29 Sep 2021 21:11:38 +0200
Subject: debian specific whitelist extension

Fix regressions in jsap, jodconverter, jmeter and tiles-autotag.

Ignore the rest because they are negligible.
---
 xstream/src/java/com/thoughtworks/xstream/XStream.java | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/xstream/src/java/com/thoughtworks/xstream/XStream.java b/xstream/src/java/com/thoughtworks/xstream/XStream.java
index 5c49410..49ee8cb 100644
--- a/xstream/src/java/com/thoughtworks/xstream/XStream.java
+++ b/xstream/src/java/com/thoughtworks/xstream/XStream.java
@@ -708,6 +708,10 @@ public class XStream {
         allowTypeHierarchy(Number.class);
         allowTypeHierarchy(Throwable.class);
         allowTypeHierarchy(TimeZone.class);
+        allowTypesByWildcard(new
+                String[]{"com.martiansoftware.jsap.xml.**",
+                    "com.artofsolving.jodconverter.**","org.apache.jmeter.**",
+                    "org.apache.tiles.autotag.**"});
 
         Class type = JVM.loadClassForName("java.lang.Enum");
         if (type != null) {
