apache/struts — pull request #11 by lukaszlenart (2014-04-25 13:34:42+00:00)
Title: Security: exclude Object's class methods

This fix is a follow up of the latest security issues discovered with `ParametersInterceptor` to allow access object's `getClass` method via http request. This also solve problem accessing the same properties via `method:` prefix - it is blocked on OGNL level.