There are some basic guidelines to mitigate the security risks. 1. Consider using AOT compilation. 2. Try to avoid using or injecting dynamic HTML content to your component. 3. Try to avoid using external URLs if not trusted. 4. Try to prevent XSRF attack by restricting the REST APIs.