MCQ: What role do security headers, such as Content Security Policy (CSP), play in preventing information disclosure in web applications?

• A. Security headers are irrelevant to information disclosure prevention.
• B. Security headers like CSP help mitigate information disclosure risks by controlling how resources are loaded, reducing the risk of unauthorized information exposure.
• C. Security headers only apply to mobile applications.
• D. Security headers do not influence web security.