Slides for the Codemotion 2011 talks have been published on 2011 Codemotion, including Carlo Bonamico presentation on the main issues and principles in securing a modern Web Application, with specific reference to the OWASP Top Ten security risks for 2010. Java & .NET always featured stronger security and reliability with respect to the common vulnerabilities (think of Buffer Overflows, etc... ) of the C/C++ world. However, the power and also complexity increase of Rich Internet Applications (DHTML, JS, AJAX...) paves the way to new attack forms, from SQL Injection to Cross-Site Scripting and Request Forgery.