Best of Application Security (Friday, Sep. 25)

Ten of Application Security industry's coolest, most interesting, important, and entertaining links from the past week -- in no particular order. Regularly released until year end. Then the Best of Application Security 2009 will be selected!

• Strict Transport Security
• ForceHTTPS: Protecting High-Security Web Sites from Network Attacks
• Strict Transport Security in NoScript
• Email-stealing worm slithers across LiveJournal
• CSRF attacks and forensic analysis
• Basic Flaw Reveals Source Code to 3,300 Popular Websites
• New Free Web Application Firewall 'Lives' In The App
• Using Microsoft's AntiXSS Library 3.1
• SQL/JavaScript Hybrid Worms As Two-stage Quines
• Study Shows Open-source Code Quality Improving