https://www.checkmarx.com/2015/12/11/21-application-security-resources-no-developer-should-be-without/