Which statements are true

$$ Cross$-$Site Scripting attacks may be countered by validating user input on the client side and the server side and by encoding special characters to prevent them from being interpreted as code.

$$ HTTP Basic Authentication is considered less secure than form$-$based authentication because the credentials are transmitted in clear text.

$$ HTTPS encryption can help to protect against XSS attacks.

$$ Phishing attacks are only successful against users who are not familiar with basic internet and web security principles.

Which of following listed statements are correct

$$ If a script $($JavaScript$)$ running on the website example.com requests to access data in another website $($website$.$com$),$ the web browser allow for it$,$ only if both web pages have the same origin $($which is defined by a combination of URI, host name and the port number$).$

$$ Side channel attacks are only effective against hardware of web applications.

$$ A Denial of Service attack can only be executed by a single attacker.

$$ Fingerprinting is a technique used to track and identify unique users across the web by collecting information about their devices and browsers.