Like any SE site, we have typical recurring questions ("What's a secure password pattern?", "What can my employer see if I use HTTPS?", etc.). But sometimes it's hard to discover the right duplicate target. Often that's because the question is phrased around a very specific scenario, it has a non-obvious title, or the keywords are difficult to search for.
How other sites address the problem:
SU has established a community-faq tag for canonical/frequent questions.
Other sites maintain lists as community wikis on meta. E.g., math.SE has List of Generalizations of Common Questions and chemistry.SE has The Giant List of Duplicates.
Would something like that be appropriate for us? Other suggestions? Not a problem at all?
Personally, I think we should experiment with a list on meta, with an emphasis on generalizations. E.g., I think most XSS categories have already been asked about. So, when seeing an XSS question that sounds familiar, I'd browse the XSS category of the list to see if we already have a generalized version of it.
A few examples of generalizations to cover would be: