Vulnerabilities in web apps – Google

Google releases Jarlsberg, an application to demonstrate common security vulnerabilities in web apps.

We want Google employees to have a firm understanding of the threats our services face, as well as how to help protect against those threats. We work toward these goals in a variety of ways, including security training for new engineers, technical presentations about security, and other types of documentation. We also use codelabs — interactive programming tutorials that walk participants through specific programming tasks.
via – Jarlsberg