Static Analysis
OWASP Top 10 - Critical Web Application Security Flaws
OWASP Prevention Cheat Sheet Series
OWASP Guide to Building Secure Web Applications
CWE/SANS TOP 25 Most Dangerous Software Errors
Mozilla Web Security reference guide