Potential fix for code scanning alert no. 3: DOM text reinterpreted as HTML

[mdawoud27]

Potential fix for https://github.com/TaskTrial/client/security/code-scanning/3

To fix the issue, we should ensure that only safe image types are accepted and processed. The best way is to validate the file type in the handleFileChange function before creating a preview. Specifically, we should reject SVG files, as they can contain embedded scripts that may be executed when rendered as an image. This can be done by checking the MIME type and/or file extension of the selected file. The fix should be applied in the handleFileChange function in src/Components/teams/TeamImageUploader.jsx, by adding a check to prevent SVG files from being previewed or uploaded.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[Copilot]

Pull Request Overview

This PR addresses a security vulnerability related to DOM text reinterpreted as HTML by blocking SVG file uploads in the team image uploader component. The fix prevents potential XSS attacks that could occur when SVG files containing embedded scripts are processed as images.

• Adds validation to reject SVG files based on MIME type and file extension
• Displays an error message to users when SVG files are selected
• Prevents creation of preview URLs for potentially malicious SVG content

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}