prevent drag and drop of malicious scripts

src/app/main.ts

@@ -13,3 +13,7 @@ if (!isDev()) {
 }
 
 platformBrowserDynamic().bootstrapModule(AppModule);
+
+// Disable drag and drop to prevent malicious links from executing in the context of the app
+document.addEventListener('dragover', (event) => event.preventDefault());
+document.addEventListener('drop', (event) => event.preventDefault());