Fix: CVE-2013-0175,  parse vulnerability, require 'multi_xml' 0.5.2