3. Cross-Site Scripting (XSS) enables attackers to inject client-side scripts into web pages viewed by other users. (a) What is the Same Origin Policy (SOP)? Give TWO URL examples which violate SOP and explain why. (6 marks) (b) (c) Explain how reflected XSS attacks can be used to bypass SOP and steal victims' cookies. Provide code snippets to illustrate your answer. (7 marks) Cross-Site Request Forgery (CSRF) is another type of Web attack. Explain the key similarities and differences between CSRF and XSS. Describe ONE possible defense technique against CSRF. (7 marks)