Nice summary of common security problems encountered in web development
Dave Child has written a very informative and good description with examples of Cross-Site scripting(XSS), Cross-Site request forgery(CSRF) and how character encodings can cause security problems. Check out the article at addedbytes.com. I highly recommend anyone working with web development either as professional or for hobby to read his article.