Which of the following is the BEST way to prevent Cross-Site Request Forgery (XSRF) attacks?

Which of the following is the BEST way to prevent Cross-Site Request Forgery (XSRF) attacks?

A.
Check the referrer field in the HTTP header

B.
Disable Flash content

C.
Use only cookies for authentication

D.
Use only HTTPS URLs