Scenario: A Citrix Engineer wants to protect a web application using Citrix Web App Firewall. After the Web App Firewall policy afweb_protect is bound to the virtual server, the engineer notices that pages are displaying in plain text with graphics included.

What is the likely cause of this?

A. The Safe Objects protection is NOT properly configured.

B. The Start URL list does NOT include CSS files.

C. The Web App Firewall feature is disabled.
D. The policy expression allows for HTML files only.