Which of the statements below are true

One of the ways to defend from XSS $($cross$-$site scripting$)$ attacks is to use HTTP$-$only cookies which will not be available to JavaScript running in the browser.

Attacking a web service may allow hackers to mine cryptocurrencies.

Code injection attacks cannot be executed in compiled programming languages $($such as Java$).$

OWASP Top $10$ security risks include Injection attacks