Upgrade to Rails 3.2.11.

https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion
Disable parsing of XML parameters by default

https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion