CVE-2013-0156: Safe XML params parsing. Doesn't allow symbols or yaml.
bumping to 2.3.15 :cry::gun:
Merge branch '2-3-stable' of git://github.com/rails/rails into 2-3-stable
Merge branch '2-3-stable' into 2-3-security-patches