Secure by Default, Inconsistent by Nature: Drupal
Most software projects don’t have to worry about this problem as much as a modular framework like Drupal does. Let’s review some examples of how Drupal’s API is safe by default and see if we can’t determine which is better...
