[3] 3. Best Services Travel (BST), an online travel agency, would like you to create a secure Web site where users can book travel reservations, The user must be signed in to pay. Write down any additional assumptions you need to make to answer the following questions. The poyment page looks like the lollowing: Amount to pay: The page shown after the user clicks "SuBmIT" looks kke the following: You chose to pay: (amount user previously input to poy) a. Can you tell if the BST site vulnerable to cross-site scripting? Why or why not? b. Can you tell if the BST site vulnerable to cross-site request forgery attacks? Why or why not? c. What specific actions can BST take to defend against these attacks