You are implementing a Web page that displays text that was typed by a user. You need to display the user input in the Web page so that a cross-site scripting attack will be prevented. What should you do？（）

A.Configure the input control to run on the server. On the submit button， add a server-side OnClick handler that calls CheckCreditCard  and  rejects  the form submission if the input is invalid.
B.On the input control，add an onChange handler that calls CheckCreditCard and cancels the form submission when the  input  is invalid.
C.Configure the input control and the submit button to run on the server. Add a submit_OnClick handler that calls CheckCreditCard  and  rejects  the  form  submission  if  the input is invalid.
D.On the form， add an onSubmit handler that calls CheckCreditCard and cancels the form submission if the input  is invalid.

A.Require developers to set EnableViewStateMac to true.
B.Store state in ControlState instead of ViewState.
C.Serialize the state into an Application state entry called "MyControl"
D.Require developers to change the session state mode to SQL Server.

A.Modify the hosting page’s caching directive as follows.
B.Add the following meta tag to the Head section of the hosting page.
C.Add the following caching directive to the hosted control.
D.Add the following caching directive to the hosted control.