Question:

A penetration tester discovers a vulnerable application and is able to steal the URL hyperlink session ID of a website. The session ID can be intercepted by the penetration tester; when the vulnerable application transmits the URL hyperlink to the website, the session IDs are embedded in the hyperlink. The penetration tester employs which of the following types of session hijacking countermeasures?