unsafe value used in a resource URL context (see http://g.co/ng/security#xss) code example

Example: unsafe value used in a resource URL context

transform(url) {
    return this.sanitizer.bypassSecurityTrustResourceUrl(url);
  }