title: How does Angular handle XSS or CSRF?
body: <p>How does Angular (2) handle XSS and CSRF. Does it even handle these attacks? 
  If so, what do I have to do to use this protection? If not, do I have to handle all these attacks in my server, or somehow with TypeScript in the frontend?</p>
  
  <p>I have read that you have to use "<code>withCredentials: true</code>", but I'm not quite sure where to put this code or if it is even that, what I'm looking for.</p>
  
  <p>In the <a href="https://angular.io/" rel="noreferrer">https://angular.io/</a> webpage I didn't find anything about this (or I just missed it).</p>