I think the problem is "web applications" and not Python, Ruby, or Java.  Mostly.<p>(If you were writing your web applications in C, you'd have to worry about memory corruption problems AND cross-site request forgeries.)