What is the purpose of the `Cache-Control: no-store` directive?

Never store any part of the response in any cache

Cache the response but revalidate every time

Never store any part of the response in any cache

Store the response for a maximum of one hour

Store the response only in shared (CDN) caches

Which mechanisms help mitigate Cross-Site Scripting (XSS)? (Select all that apply.)

Content-Security-Policy (CSP) headers; Escaping/encoding user-generated content; Using HttpOnly cookies

Content-Security-Policy (CSP) headers

Escaping/encoding user-generated content

Use your cached copy; it hasn't changed

How the web works under the hood: HTTP methods, status codes, headers, caching, and security fundamentals.

mediumRankedWeb

Playing in practice mode. to submit your score to the leaderboard.