A user logs in to a shopping website that contains a malicious hidden link to pass an HTTP request to send user information to another website. Because the user is already logged in to the shopping website, the browser sends the website cookies to the other website. If the shopping website is not protected, the attack succeeds, sending the user information to another website.
What is the best approach to protecting an application from such attacks?
A. Enable cross-site request forgery (CSRF) with the help of cookies.
B. Create logic in the application to protect users from unsolicited requests to the server.
C. Enable cross-site request forgery (CSRF), which protects the user from unsolicited requests to a server.
D. Plug a third-party tool into the shopping website to protect users from unsolicited requests.