You're reviewing a web application. Which of these features are security warning signs?

Each correct answer represents a complete solution. Choose three.

Input errors are logged and clearly displayed to users in full detail.

Input validation is performed more rigorously on the client side than on the server side.

C Secret cookies are used to prevent XSRF attacks.

D The web server and database software are on separate physical servers, both similarly secured.

E The httpOnly flag is set on session cookies.