FallibleInc/security-guide-for-developers ? reverse-engineered prompt

Build me a practical security guide for web developers that feels easy to read and useful in real life. I want a clean set of pages or markdown files that explain the most common security mistakes, with a simple checklist people can follow and short examples that make the risks obvious. Include sections for HTTPS, authentication, authorization, input validation, passwords, sessions, security headers, common attack types, cloud and config mistakes, and a page that explains what can go wrong in plain language.

Please keep it friendly for beginners, but still useful for people who already know the basics and just need a reminder. If it makes sense, add a Chinese version too and keep the structure aligned. Make it look polished, with a clear table of contents, readable headings, and a few illustrations or callouts where helpful. Look up current docs online if you need to, especially for anything that changes over time.