For some reason I'm still surprised when I meet a web developer who doesn't really know about XSS and SQLi. Part of the problem is people who code for a living

For some reason I'm still surprised when I meet a web developer who doesn't really know about XSS and SQLi. Part of the problem is people who code for a living. If you get to work, write code for 8 hours, then leave and never think about programming outside that time you don't give yourself the opportunity to learn very much. Unless you work with amazing people and/or read a lot and participate in communities while at work.