PwC Interview Question

Xss, csrf. Their preventions