PwC interview question

Xss, csrf. Their preventions