Update to xstream-whitelist snapshot

https://issues.sonatype.org/browse/NEXUS-6542

Depends on:

https://github.com/sonatype/xstream-whitelist/pull/1