in reply to Web Application Security Testing

A couple of recent Perl monks security nodes worth reading are: