BZ-1063602 BZ-1063603 Upgrade xstream from 1.4.3 to 1.4.7