Cross-site scripting (XSS) attacks are BEST prevented through:

A. use of common industry frameworks.
B. secure coding practices.
C. application firewall policy settings.
D. a three-tier web architecture.