Which of the following is the MOST effective control to minimize the risk of cross-site scripting (XSS)?

A. Periodic vulnerability assessments
B. Secure coding practices
C. Network intrusion prevention system
D. Web firewall policy