Update team page JavaScript to prevent XSS

[jimchamp]

Problem

The content of our team page is largely generated with JavaScript. When new elements are constructed for this page, text content is often added by setting the innerHTML property. This way of creating elements could leave us vulnerable to cross-site scripting attacks (more information here).

Reproducing the bug

1. Go to ...
2. Do ...

• Expected behavior:
• Actual behavior:

Context

• Browser (Chrome, Safari, Firefox, etc): Any
• OS (Windows, Mac, etc): All
• Logged in (Y/N): N
• Environment (prod, dev, local): prod

Breakdown

Since none of the text content used to generate the team member cards contains markup, it may be easiest to use textContent instead of innerHTML when creating the cards.

Requirements Checklist

• In team.js, replace all instances of innerHTML with textContent

Related files

• team.js

Stakeholders

---

Instructions for Contributors

• Please run these commands to ensure your repository is up to date before creating a new branch to work on this issue and each time after pushing code to Github, because the pre-commit bot may add commits to your PRs upstream.

[ronibhakta1]

Hey @jimchamp will you assign me the issue i will make the required changes as you have mentioned and get the checks done :)

[ronibhakta1]

Hey @jimchamp will you assign me the issue i will make the required changes as you have mentioned and get the checks done :)

i'm waiting for your response !!1

[phoenix7815]

Hello @jimchamp, I’m new to open source and contributing to projects. I’d be glad to get started as soon as you assign me this issue. Thank you!

[prasad14070]

Hello @jimchamp , we had discussion on slack as well, I would like to contribute on this issue , it would be great if you assign this to me. I’ll ensure that the usage of textContent is correctly implemented and tested. Thank you!

[yrpatel24]

Hi @jimchamp! I am looking to contribute to this issue as well. If no one is currently working on it I can help!

[jimchamp]

Go for it @ronibhakta1!