What is Sanitization? Does Angular support it?

Sanitization is the inspection of an untrusted value, turning it into a value that's safe to insert into the DOM. Yes, Angular supports sanitization. It sanitizes untrusted values for HTML, styles, and URLs but sanitizing resource URLs isn't possible because they contain arbitrary code.

Practical Code Example

// Sanitization: Inspects untrusted values and strips malicious elements:
// Angular automatically sanitizes values bound to [innerHTML]:
// <div [innerHTML]="userContent"></div> -> strips <script> tags automatically!