Which of the following is NOT true about XSS attacks?

$1.$ Reflected XSS requires victim to be lured to visit attacker$$s website

$2.$ Stored XSS can be stopped by filtering user inputs

$3.$ In reflected XSS attacks the victim thinks the malicious script is coming

from the trusted server

$4.$ Stored XSS can be stopped only at the server$-$side

a$)1-3-4$ b$)2-3-4$ c$)1-2$ d$)3$ e$)4$