'Developers Security Best Practices' is a bullshit-free, developers friendly, open-source reference of best practices for avoiding vulnerabilities.
All Good practices:
Data validation
Safe password storage
Timing Attacks against String Comparison
Timing Attacks against String Comparison
Add a new good practice