I'm using Angular and in html code how to avoid cross site scripting vulnerabilities in html DOM

If I use this lines didn't see any vulnerabilities,

<tr *ngFor="let result of results">
    <td>{{ result.testId }}</td>
</tr>

but if we used title attribute inside tag getting vulnerabilities (used title for getting tooltip)

<tr *ngFor="let result of results">
    <td title="{{result.testId}}">{{ result.testId }}</td>
</tr>

Kindly help me how to avoid vulnerabilities.