我在哪里可以找到故意不安全的开源Web应用程序？

As a developer, I've learned that I usually gain a better understanding of best/worst practices through experience. The area of web application security isn't really somewhere where my organization can afford to let developers learn through trial and error. As a developer, I've learned that I usually gai