EllisLab/CodeIgniter — pull request #2865 by darwinel (2014-02-09 00:28:15+00:00)
Title: CodeIgniter support some basic web security by default (see comment)!

I think its better to enable this basic security options by default.
It’s more likely that users who build a new website or application from
ground up, and use CodeIgniter can get used to this and eventually turn
this off. From a web security perspective, we can support a more secure
web, by default! Who agrees?