Open Web Application Security Project. A free all-volunteer organization producing web application security standards, tools, and recommendations including the OWASP Top 10.
Want to actually apply concepts like this instead of just reading definitions?
Practice free on Zamlom