What does the browser 'developer tools' Network tab reveal, and what security implication does this have for front-end developers?
- A.The Network tab shows only requests that fail, including headers, status codes, and timing data - requests that succeed are hidden from the panel. Any sensitive data in API responses (hidden JSON fields, tokens, internal IDs) is protected by the Same-Origin Policy and invisible to the logged-in user even when the DevTools panel is open on the same tab
- B.The Network tab lists all requests made by the page, with response bodies masked for HTTPS traffic and cookies redacted. Any sensitive data in API responses (hidden JSON fields, tokens, internal IDs) stays unreadable to the logged-in user
- C.The Network tab records every request in the browser process, including requests made by other tabs and extensions, with the headers of third-party sites. Sensitive tokens (session cookies, API keys, CSRF values) are visible only to the browser vendor
- D.The Network tab shows all HTTP requests and responses including headers, body content, authentication tokens, cookies, and response data - everything the browser sends or receives is visible. Any sensitive data in API responses (hidden JSON fields, tokens, internal IDs) is visible to the logged-in user via DevTools