REST Putting a WFS Settings xml results into an Unauthorized class found during XStream conversion

Description

The XStreamPersister initializers and loaders declare the allowed types for XML Unmarshalling.

The WFSXStreamLoader declares WFSInfo.Version.class and GMLInfoImpl.class as allowedTypes.
https://github.com/geoserver/geoserver/blob/master/src/wfs/src/main/java/org/geoserver/wfs/WFSXStreamLoader.java#L33

However, trying to do a REST PUT of a wfs settings.xml result into the attached PUTException.log.

---------------------------
Steps to replicate it:
Simply send a PUT request against:
http://HOST:PORT/geoserver/rest/services/wfs/settings.xml

using the wfs.xml settings available on the "release" data dir of the geoserver code, as body of the PUT.
https://github.com/geoserver/geoserver/blob/master/data/release/wfs.xml

Environment

None

Status

Assignee

Andrea Aime

Reporter

Daniele Romagnoli

Triage

None

Fix versions

Affects versions

Components

Priority

Medium
Configure