What is the correct code when converted to html entities?

XSS attacks occur on Web pages that do not perform appropriate bounds checking on data
entered by users. Characters like < > that mark the beginning/end of a tag should be converted
into HTML entities.

What is the correct code when converted to html entities?

A.
Option A

B.
Option B

C.
Option C

D.
Option D