Nugget Post : Excellent article re web security

Even though the article focuses on ruby, it is an excellent all round security article that highlights web application vulnerabilities and countermeasures. All in all, every developer and pentester should read, regardless of the language they develop in:

http://guides.rubyonrails.org/security.html