SafeResolver.java

package example;

import org.apache.commons.beanutils.expression.DefaultResolver;

public class SafeResolver extends DefaultResolver {

    @Override
    public String next(String expression) {
        String property = super.next(expression);
        if ("class".equalsIgnoreCase(property)) {
            return "";
        }
        return property;
    }
}

SafeResolverListener.java

package example;

import javax.servlet.ServletContextEvent;
import javax.servlet.ServletContextListener;

import org.apache.commons.beanutils.BeanUtilsBean;

public class SafeResolverListener implements ServletContextListener {

    @Override
    public void contextInitialized(ServletContextEvent event) {
        SafeResolver resolver = new SafeResolver();
        BeanUtilsBean.getInstance().getPropertyUtils().setResolver(resolver);
    }

    @Override
    public void contextDestroyed(ServletContextEvent event) {
    }
}

describe の件、私は hasNested() もオーバーライドして "class" に対してだけ false を返すようにしてみました。