OWASP Top 10
AngularJS Security
The Evil Side of JavaScript
Javascript Injection
HTML5 Security Cheatsheet