A.${message}< c：out>B.

You have been contracted to create a web site for a free dating service. One feature is the ability for oneclient to send a message to another client， which is displayed in the latter client’s private page. Your contract explicitly states that security is a high priority. Therefore， you need to prevent cross-site hacking inwhich one user inserts JavaScript code that is then rendered and invoked when another user views thatcontent.
Which two JSTL code snippets will prevent cross site hacking in the scenario above？ （）

A.<c：out>${message}</c：out>
B.<c：out value=’${message}’ />
C.<c：out value=’${message}’ escapeXml=’true’ />
D.<c：out eliminateXml=’true’>${message}</c：out>
E.<c：out value=’${message}’ eliminateXml=’true’ />

多项选择题In a JSP-centric shopping cart application， you need to move a client’s home address of the Customerobject into the shipping address of the Order object. The address data is stored in a value object classcalled Address with properties for： street address， city， province， country， and postal code. Which two JSPcode snippets can be used to accomplish this goal？（）

A.<c：set var=’order’ property=’shipAddress’value=’${client.homeAddress}’ />
B.<c：set target=’${order}’ property=’shipAddress’value=’${client.homeAddress}’ />
C.<jsp：setProperty name=’${order}’ property=’shipAddress’ value=’${client.homeAddress}’ />
D.<c：set var=’order’ property=’shipAddress’><jsp：getProperty name=’client’ property=’homeAddress’ /> </c：store>
E.<c：set target=’${order}’ property=’shipAddress’><jsp：getProperty name=’client’ property=’homeAddress’ /> </c：set>

多项选择题A custom tag is defined to take three attributes. Which two correctly invoke the tag within a JSP page？（）

A.<prefix：myTag a="foo" b="bar" c="baz" />
B.<prefix：myTag attributes={"foo"，"bar"，"baz"} />
C.<prefix：myTag jsp：attribute a="foo" b="bar" c="baz" />
D.<prefix:myTag><jsp:attribute name="a">foo</jsp:attribute><jsp:attribute name="b">bar</jsp:attribute><jsp:attribute name="c">baz</jsp:attribute>. </prefix:myTag>

多项选择题You are developing several tag libraries that will be sold for development of third-party web applications.You are about to publish the first three libraries as JAR files： container-tags.jar，advanced-html-form-tags.jar， and basic-html-form-tags.jar. Which two techniques are appropriate for packaging the TLD files forthese tag libraries？（）

A.The TLD must be located within the WEB-INF directory of the JAR file.
B.The TLD must be located within the META-INF directory of the JAR file.
C.The TLD must be located within the META-INF/tld/ directory of the JAR file.
D.The TLD must be located within a subdirectory of WEB-INF directory of the JAR file.
E.The TLD must be located within a subdirectory of META-INF directory of the JAR file.

多项选择题Whichtwosecuritymechanismscanbedirectedthroughasub-elementoftheelementinawebapplicationdeploymentdescriptor？（）

A.Authorization
B.Data integrity
C.Confidentiality
D.Authentication

单项选择题Whichsecuritymechanismusestheconceptofarealm？（）

A.Authorization
B.Data integrity
C.Confidentiality
D.Authentication