Java / web application security links

• Java security libraries and frameworks
• Java 6 SE Security
• JEE 5 tutorial security chapters
• Spring Security (formerly acegi)
•  Java security guidelines, vulnerabilities and assessment
• Open Web Application Security Project (OWASP)
• Web application top ten vulnerabilities
• Building Secure Web Applications and Web Services
• Code Review Guide
• Web Application Testing
• Center for Internet Security (CIS)
• apache web server
• tomcat
• U.S. DOD DISA (Defense Information Systems Agency) Security Technical Implementation Guides (STIGS)
• Security checklists (application development, webserver general, tomcat, weblogic, apache...)
• Web server STIG 


• JavaScript (GWT)