Fix for rails xml parsing vulnerability