What are some essential security measures I should check for while developing a web application?

I have proper checks for CSRF and XSS. What are other security measures I should place to make my app more secure.