What is the best way to secure CGI scripts?

A.
Configure the firewall to filter CGI at ports 80 and 443.

B.
Activate Java on the primary Web server.

C.
Ensure that the code checks all user input.