[pdebruic]

OWASP is a good place to start that covers most everything

https://www.owasp.org

Specifically the development guide: https://www.owasp.org/index.php/Category:OWASP_Guide_Project