Block one more gadget type (apache/commons-proxy, CVE-2020-11112)

Another gadget type(s) reported regarding a class of `org.apache.commons:commons-proxy` library.
See https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062 for description of the general problem.

Mitre id: CVE-2020-11112
Reporter: Yiting Fan

Fix will be included in:

* 2.9.10.4
* Does not affect 2.10.0 and later
