Web app security websites?

So come on, share which sites you use to learn about web application.

The one I use mostly is www.owasp.org

Does anyone else know any other good web sites on web app security???

SittingDuck

I use www.owasp.org (like you), www.whitehatsec.com and www.cgisecurity.com most of the time. :)

just found http://www.spidynamics.com/ it has some very good papers. There is a new one on the security of SOAP, which is well worth a read.

SittingDuck