How do you support server side XSS protection in Angular application?

The server-side XSS protection is supported in an angular application by using a templating language that automatically escapes values to prevent XSS vulnerabilities on the server. But don't use a templating language to generate Angular templates on the server side which creates a high risk of introducing template-injection vulnerabilities.

Practical Code Example

// Server-Side XSS Protection:
// Server should set HTTP response headers:
// Content-Security-Policy: default-src 'self';
// X-Content-Type-Options: nosniff
// X-Frame-Options: DENY