The one provided by Ruby on Rails covers quite a few basics: http://guides.rubyonrails.org/security.html

Not really text, but the text version of Railscast #178: http://asciicasts.com/episodes/178-seven-security-tips