TypeScript : XSS protection is disabled