[AMQ-8348] Fix XmlMessageRenderer has the risk of XStream deserializa…

…tion

(cherry picked from commit 0991082)

activemq-web/src/main/java/org/apache/activemq/web/view/XmlMessageRenderer.java

@@ -42,6 +42,7 @@ public void renderMessage(PrintWriter writer, HttpServletRequest request, HttpSe
     public XStream getXstream() {
         if (xstream == null) {
             xstream = new XStream();
+            XStream.setupDefaultSecurity(xstream);
         }
         return xstream;
     }