references
White Hat Security's 2013 Website Security Report
pages
OWASP top ten security flaws
Acunetix on XSS
Mozilla's web security page
w3 on same origin policy
videos
Mikko Hypponen: three types of online attack
OWASP YouTube Channel