Fix SecurityManager test for Java 17,

Author: joehni

xstream/src/test/com/thoughtworks/acceptance/SecurityManagerTest.java

@@ -1,5 +1,5 @@
 /*
- * Copyright (C) 2006, 2007, 2009, 2010, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2024 XStream Committers.
+ * Copyright (C) 2006, 2007, 2009, 2010, 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2024, 2025 XStream Committers.
  * All rights reserved.
  *
  * The software in this package is published under the terms of the BSD
@@ -28,8 +28,8 @@
 import com.thoughtworks.xstream.converters.reflection.PureJavaReflectionProvider;
 import com.thoughtworks.xstream.core.JVM;
 import com.thoughtworks.xstream.io.xml.DomDriver;
+import com.thoughtworks.xstream.io.xml.MXParserDriver;
 import com.thoughtworks.xstream.io.xml.SimpleStaxDriver;
-import com.thoughtworks.xstream.io.xml.Xpp3Driver;
 import com.thoughtworks.xstream.testutil.DynamicSecurityManager;
 
 import junit.framework.TestCase;
@@ -202,7 +202,7 @@ public void testSerializeWithXppDriverAndSunUnsafeReflectionProviderAndActiveSec
         sm.setReadOnly();
         System.setSecurityManager(sm);
 
-        xstream = new XStream(new Xpp3Driver());
+        xstream = new XStream(new MXParserDriver());
 
         assertBothWays();
     }
@@ -246,7 +246,7 @@ public void testSerializeWithXppDriverAndPureJavaReflectionProviderAndActiveSecu
         sm.setReadOnly();
         System.setSecurityManager(sm);
 
-        xstream = new XStream(new PureJavaReflectionProvider(), new Xpp3Driver());
+        xstream = new XStream(new PureJavaReflectionProvider(), new MXParserDriver());
 
         assertBothWays();
     }
@@ -300,6 +300,8 @@ public void testSerializeWithDomDriverAndPureJavaReflectionProviderAndActiveSecu
         sm.addPermission(source, new PropertyPermission("jdk.xml.overrideDefaultParser", "read"));
         sm.addPermission(source, new PropertyPermission("jdk.xml.resetSymbolTable", "read"));
         sm.addPermission(source, new PropertyPermission("jdk.xml.totalEntitySizeLimit", "read"));
+        sm.addPermission(source, new PropertyPermission("jdk.xml.xpathExprGrpLimit", "read"));
+        sm.addPermission(source, new PropertyPermission("jdk.xml.xpathExprOpLimit", "read"));
         sm.addPermission(source, new PropertyPermission("maxOccurLimit", "read"));
         sm.addPermission(source, new PropertyPermission("sun.boot.class.path", "read"));
         sm.addPermission(source, new PropertyPermission("sun.io.serialization.extendedDebugInfo", "read"));