unsafe value used in a resource URL context (see http://g.co/ng/security#xss) at DomSanitizerImpl.sanitize (platform-browser.js:4183) code example

Example: unsafe value used in a resource URL context

transform(url) {
    return this.sanitizer.bypassSecurityTrustResourceUrl(url);
  }