Security threats for web applications

CSRF, DoS, SQL injection and XSS are few of the most common security threats for any web application. Looking at the expand-ability of web preventing such attacks is always on priority. Apart from DoS rest threats can well be prevented at application level. Prevention of DoS is often difficult, expensive and needs 3rd party tools.