Which two preventive measures are used to control cross-site scripting? (Choose two.)
A . Enable client-side scripts on a per-domain basis
B . Incorporate contextual output encoding/escaping
C . Disable cookie inspection in the HTML inspection engine
D . Run untrusted HTML input through an HTML sanitization engine
E . SameSite cookie attribute should not be used
Answer: A,B