Infosec bods rate app languages; find Java ‘king’, put PHP in bin

Web scripting languages offer XSSive flaws: Java applications have been found to have many fewer common vulnerabilities than those coded using web scripting language. Less than a quarter of Java apps sport sporting SQL injection vulnerabilities, compared to more than three quarters of those written in PHP.