The development team wants to block Cross Site Scripting attacks from pods in its environment.

create a Host CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to “prevent”.

create a Container CNAF policy, targeted at a specific resource, check the box for XSS attack protection, and set the action to alert.

create a Container CNAF policy, targeted at a specific resource, check the box for XSS protection, and set the action to prevent.

create a Container CNAF policy, targeted at a specific resource, and they should set “Explicitly allowed inbound IP sources” to the IP address of the pod.