Issue Summary

New velocity lib 1.6.4-atlassian-23 in confluence 7.13 prevent velocity template render correctly due to restricted class: 

net.java.ao.Entity,
net.java.ao.RawEntity,
net.java.ao.EntityProxyAccessor

Steps to Reproduce

1. Start confluence 7.14.x
2. Install plugin https://marketplace.atlassian.com/apps/1211907/announcer-for-confluence/version-history
3. Create announcer items, the items can't be rendered.

Expected Results

Announcer items should be renders correctly and no error

Actual Results

Items are rendered with blank contents

Workaround

• Stop confluence
• Edit file  /WEB-INF/classes/velocity.properties 
• update introspector.allowlist.classes with values

• introspector.allowlist.classes = java.io.Serializable,\
  java.lang.reflect.Proxy,\
  net.sf.hibernate.proxy.HibernateProxy,\
  net.sf.cglib.proxy.Factory,\
  java.io.ObjectInputValidation,\
  net.java.ao.Entity,\
  net.java.ao.RawEntity,\
  net.java.ao.EntityProxyAccessor 

• Restart Confluence

Affected apps that have confirmed to be impacted

• com.wittified.atl-announcer-confluence
• com.stiltsoft.confluence.quiz

Notes

For other affected versions see:

• 7.4.12: https://jira.atlassian.com/browse/CONFSERVER-73759
• 7.13.1: https://jira.atlassian.com/browse/CONFSERVER-73758
• 7.14.0: https://jira.atlassian.com/browse/CONFSERVER-73757