For a semester exam, which option is correct about code review for security?

A. examining code for insecure patterns, logic flaws and misuse cases B. only counting lines of code C. only checking indentation D. only renaming variables