I need to develop an application security strategy for a web application product. Do you have any recommendations as far as procedures and policies are concerned? Any inputs / guidelines or relevant URLs will much be appreciated.
closed as too broad by Adnan, Terry Chia, TildalWave, Xander, Scott Pack Nov 6 '13 at 13:28
There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.
You should follow web security standards outlined by OWASP