A B2C Commerce Developer has just finished implementing a new promotion code form on checkout. During review, an Architect notes that the form it not using CSRF validation correctly.

Which two options are best practice recommendations for dealing with CSRF validation? Choose 2 answers
Select all that apply, then click Submit answer.
-
○
Ensure the CSRF protection is validated on form submission.
-
○
Only use GET methods over HTTPS.
-
○
Automatically renew the CSRF Token if expired.
-
○
Only use POST methods over HTTPS.