Ask HN: Best resources on webapp security?
The Web App Hacker's Handbook is the gold standard for web security books.The Tangled Web is a good primer on browser security, which is a deeper topic.The OWASP Top 10 is worth knowing because it's a widely recognized metric, but OWASP itself is not an especially great resource.