If you're running a very old version of rails, it might not be that easy to update to the latest rails version. In that case, just stick this in your config/env

If you're running a very old version of rails, it might not be that easy to update to the latest rails version. In that case, just stick this in your config/environment.rb ActionController::Base.param_parsers.delete(Mime::XML) This will disable parsing of xml which most people never use anyway