Can anyone confirm whether or not I still need to add ActionDispatch::ParamsParser::DEFAULT_PARSERS.delete(Mime::XML) to an initializer if my apps have been updated to rails 3.2.11?
I suggest that you test it. You should get something like 'Disallowed type attribute' error if everything is installed correctly.
You can use Postman Chrome extension to quickly test if your server is ok.
You will only get that error if you upgrade to 3.2.11 (or whatever) and do not disable XML. If you disable XML, you'll just silently not parse the XML (regardless of update status).