I'm currently investigating Haskell as a platform for secure web development. I'm leaning toward happstack for the web framework part, but I'm also investigating yesod and snap.
My gut feeling says that the way the language works (especially the combination of full purity and a powerful static type system) makes it an excellent choice, security-wise, and the frameworks themselves claim to be exceptionally secure by removing typical security issues and pitfalls found in other stacks.
However, I haven't been able to find any resources to back up this assumption, so what I'm looking for is security reports, research papers, or even informal documents, about security aspects of the Haskell toolchain (particularly GHC and the GHC RTS) and the aforementioned web frameworks (happstack, snap, yesod, and possibly others that may be suitable).
Has anyone performed security audits on either of these? Is there any documented theoretical or practical proof of the robustness and soundness of these tools? Are there any high-profile websites or applications running on either of these frameworks, and what is their security record?