Comment Comment by tptacek Yes: The Web App Hacker's Handbook is a better resource for building a checklist of app security concerns for your application, and remains the best resource on generic appsec. parent tptacek 10 years ago