Update xstream-whitelist to 1.4.6-SONATYPE-03