Rails project to exploit using XML YAML deserialization