Which statements listed below are true WebAuthn allows websites to authenticate users without having access to their password, reducing the risk of password$-$related data breaches. A password hash is not a secure way to store passwords because it can be easily reversed. Cross$-$site scripting $($XSS$)$ attacks can be countered with disallowing or filtering HTML tags in users' posts. Using a Content Security Policy $($CSP$)$ can help prevent cross$-$site scripting $($XSS$)$ attacks.