A Cross-Site Scripting (XSS) issue exists in the `domino` DOM emulation dependency of `@angular/platform-server` during the serialization of raw-text elements like `<script>`, `<style>`, and `<iframe>`. The problem stems from a Unicode index alignment bug in the escaping logic. Because JavaScript calculates string lengths and indices using UTF-16 code units, astral characters (such as emojis) occupy two code units. When dynamic text contains these characters before a closing tag, the index offset calculation shifts, causing `domino` to fail to escape the closing tag. An attacker can provide a payload containing an astral Unicode character and a closing tag to exit the raw-text context and execute a subsequent `<script>` block during Server-Side Rendering (SSR), leading to same-origin XSS.