Which of the following 2 security risks are not included in OWASP published 2017 Top 10 Web Application Security Risks
A . Cross-Site Request Forgery (CSRF)
B . Cross-Site Scripting (XSS)
C . Unvalidated Redirects and Forwards
D . Injection
Answer: A,C