Code injection

Summary

A security researcher discovered that they were able to inject potentially malicious code into Legal Robot's newly created Roadmap page through improper input sanitization when submitting a new Idea for consideration by the community. A limited-scope attack was possible since the input sanitization only occurred during the approval process. Only the current user could be impacted by this attack, but with the addition of social engineering or some unknown exploit, this bug could have been a component of a more serious attack. Thanks to @i1ackerone_ for an excellent report!