Well even Google still has tons of bugs (including XSS and XSRF).<p>Nowadays it&#x27;s not possible to write applications without knowledge of XSS, XSRF, SQLi, redirects etc.etc. The security amount you have to understand is just getting ridiculous.<p>And let&#x27;s not even mention DOS. No-one is securing against that and most servers can be made inaccessible by a simple script that just opens connections.