Common Security Mistakes in Web Applications - Smashing Magazine - http://www.smashingmagazine.com/2010...
Excellent summary of common security flaws in web apps, and how to fix them. This has the best description of XSS (cross site scripting) that I've seen. - Fred Yankowski