So come on, share which sites you use to learn about web application.

The one I use mostly is www.owasp.org

Does anyone else know any other good web sites on web app security???

SittingDuck