You're reviewing a web application. Which of these features are security warning signs?

Each correct answer represents a complete solution. Choose three.

A $$ The web server and database software are on separate physical servers, both similarly secured.

The httpOnly flag is set on session cookies.

C $$ Input errors are logged and clearly displayed to users in full detail.

D $$ Input validation is performed more rigorously on the client side than on the server side.

E $$ Secret cookies are used to prevent XSRF attacks.