A couple of recent Perl monks security nodes worth reading are:
In reply to Re: Web Application Security Testing by eyepopslikeamosquito in thread Web Application Security Testing by ghenry