Security - the elephant in the room. Everyone agrees that it is very important but few takes it seriously: in the recent past a huge number of companies leaked massive amounts of user data. Let's take a look how we can survive web security - from an application developer's point of view. In this talk we are going to touch the most common web security issues as well as some advanded attack vectors and learn how to defend our applications against them, like: * cross-site scripting, * injection attacks, * storing passwords, * cross-site request forgery, * securing dependencies, * timing attacks