Infosec bods rate app languages; find Java 'king', put PHP in bin

Web scripting languages offer XSSive flaws

Java applications have been found to have many fewer common vulnerabilities than those coded using web scripting language. Less than a quarter of Java apps sport sporting SQL injection vulnerabilities, compared to more than three quarters of those written in PHP."