Securing Web Application Technologies [SWAT] Checklist


Yet another great resource from SANS -

http://www.securingthehuman.org/developer/swat