Which among the following do you think will prevent a CSRF attack?
/transfer.asp?fromacct=”account1”&toaccount=”account2”&amount=200.45&trnsactToken=”121431ersw”
/email.jsp&to=”[email protected]”&subject=”hi”
Use https for all secured pages
Use encryption for session cookies