Comment by rollypolly

I would add this to the suggested reading list:

https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines