For 1.5, all default configuration values went into the FuelPHP core. This has caused an issue with the security settings, leaving fresh 1.5 installations without security enabled by default.
This hotfix sets the default security settings back to the way they were in 1.4, with both the URI filter and output filter enabled.