diff --git a/Gemfile b/Gemfile
index 950d0d5..908c848 100644
--- a/Gemfile
+++ b/Gemfile
@@ -9,6 +9,7 @@ gem "mime-types"
 gem "awesome_nested_set", "3.0.0"
 gem "protected_attributes"
 gem "actionpack-action_caching"
+gem "actionpack-xml_parser"
 
 # Windows does not include zoneinfo files, so bundle the tzinfo-data gem
 gem 'tzinfo-data', platforms: [:mingw, :x64_mingw, :mswin, :jruby]
diff --git a/config/application.rb b/config/application.rb
index a2918a6..906b067 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -47,6 +47,10 @@ module RedmineApp
     # Do not include all helpers
     config.action_controller.include_all_helpers = false
 
+    # XML parameter parser removed from core in Rails 4.0
+    # and extracted to actionpack-xml_parser gem
+    config.middleware.insert_after ActionDispatch::ParamsParser, ActionDispatch::XmlParamsParser
+
     # Specific cache for search results, the default file store cache is not
     # a good option as it could grow fast. A memory store (32MB max) is used
     # as the default. If you're running multiple server processes, it's