Which of the following is a practice associated with the security risk known as cross-site scripting (XSS)?

A.
Inserting JavaScript code in a URL query string to perform an unintended or malicious action

B.
Using a look-alike site to impersonate a trusted site so the user will enter sensitive information

C.
Using a certificate authority validation to persuade users to accept a specialized script that can override certain security restrictions in thebrowser

D.
Launching a JavaScript statement that has no conditions for ending, thus requiring the user to close the browser in order to end the script