Web security is an important issue, and the author tries to guide you through the basic prinsiples of designing secure web components. He does so in a nice and gentle way, without going into technical details. This document does not serve as a template on how to write secure code -- it's mission is to make you think about all the possible pits you might be falling into in your design and code process.