Some final pointers from Khalid

Security team

http://drupal.org/security-team

Input formats

http://heine.familiedeelstra.com/input-formats-beware

Videos at DrupalCon

Introduction

http://www.archive.org/details/IntroductionToSecurity

Advanced

Slides

http://dc2009.drupalcon.org/session/hacker-proof-your-code-advanced-drupal-security

http://www.archive.org/details/DrupalconDc2009-AdvancedDrupalSecurity

The Drupal security team, announcements (core and contrib)

http://drupal.org/security

Secure code

http://drupal.org/writing-secure-code

Report problems to the security team without disclosing them using

the drupal.org contact form.

General book on Drupal security

http://crackingdrupal.com/