fix(core): fix possible XSS attack in development through SSR.#40154

mhevery wants to merge 1 commit intoangular:9.1.xangular/angular:9.1.xfrom

mhevery:xss_fix_9.1.xmhevery/angular:xss_fix_9.1.xCopy head branch name to clipboard