I was trying to research on available secure coding guidelines of server-side and client-side languages.
There are online documentation from Oracle for Java, Microsoft for asp.net, and w3 for html5 to name a few. There were also third vendor guidelines from SEI, Veracode etc
For secure coding, should non-vendor documentation like Veracode be followed?
Will the parent vendor documentation (like Oracle, Microsoft, etc) miss any security guidelines that may be available in third vendor publications like veracode?
Do all scripts/programming languages have secure coding guidelines available? Is it mandatory for program or framework creators to release secure coding guidelines