It would be cool to have a regression testsuite showing "insecure" code for each class of security problem, and showing that the problem is fixed by the template.
That's on my roadmap! Do you have ideas on how a testsuite for that might work? I am open to suggestions.