After scanning the main company’s website with the OWASP ZAP tool, a cybersecurity analyst is reviewing the following warning:
The analyst reviews a snippet of the offending code:
Which of the following is the BEST course of action based on the above warning and code snippet?
A.
The analyst should implement a scanner exception for the false positive.
B.
The system administrator should disable SSL and implement TLS.
C.
The developer should review the code and implement a code fix.
D.
The organization should update the browser GPO to resolve the issue.
Explanation: