I also have a low opinion of the quality of the OWASP guidelines. Their web-related ones are largely unmaintained; the XSS one, for example, had a couple of fai

I also have a low opinion of the quality of the OWASP guidelines. Their web-related ones are largely unmaintained; the XSS one, for example, had a couple of fairly crazy pieces in it (e.g. saying that / should be encoded) for more than ten years (fixed a few months ago, begrudgingly), and still has various content that is not factually correct, referring incompletely to obsolete specs, &c. Also it’s not a cheat sheet in any way; far too long for that.