The BEST methods for a web developer to prevent the website application code from being
vulnerable to cross-site request forgery (XSRF) are to: (Select TWO).

A.
permit redirection to Internet-facing web URLs.

B.
ensure all HTML tags are enclosed in angle brackets, e.g., ”<” and “>”.

C.
validate and filter input on the server side and client side.

D.
use a web proxy to pass website requests between the user and the application.

E.
restrict and sanitize use of special characters in input and URLs.