Ask HN: the best(s) web security book for web developers

What are, in your opinions, the best web security books available for a web developer today?

The kind you would have on your desk along your Rails/Django/JS classics when building a web app with your team?