emmadilemma started reading Web Application Security by Andrew Hoffman
I'm conflicted about this book. I'm getting good information from it, but the author promises to explain things to beginners better than he does. It's useful to people with a fair bit of experience in JavaScript. Coders in other languages will need a crash course in the deeply nested callbacks that are typical in modern JS.