Resolve CodeQL Alert 38-40: Missing variable declaration

[roslynwythe]

Prerequisite

1. Be a member of Hack for LA. (There are no fees to join.) If you have not joined yet, please follow the steps on our Getting Started page.
2. Before you claim or start working on an issue, please make sure you have read our How to Contribute to Hack for LA Guide.

Overview

As developers. we need to analyze CodeQL alerts 38, 39 and 40 and to either recommend dismissal of the alerts or update the code to resolve the alerts.

Action Items

• DO NOT DISMISS ANY ALERTS. Dismissal of alerts should be done by dev leads only after review of the recommendation
• Browse to the link in the next Action Item and read the contents. Click "See More" to view Recommendations, Examples and References.
• https://github.com/hackforla/website/security/code-scanning/38
• https://github.com/hackforla/website/security/code-scanning/39
• https://github.com/hackforla/website/security/code-scanning/40
• In a comment in this issue, add your analysis and recommendations. The recommendation can be one of the following: dismiss as test, dismiss as false positive, dismiss as won't fix, or update code. An example of a 'false positive' is a report of a JavaScript syntax error that is caused by markdown or liquid symbols such as --- or {%.
• Apply the label ready for dev lead then move the issue to Questions/In Review
• If the recommendation is to update code:
  • create an issue branch and proceed with the code update
  • test locally using docker to ensure that there are no changes to Guides: 2FA webpage
  • proceed with pull request in the usual manner

For merge team/dev lead

• If recommendation to dismiss is approved, dismiss the alert with a comment, then close the issue as completed.
• When this issue is closed please check off the dependency (under "Analysis Issues") in Epic: Manage CodeQL deployment #5005. If all analysis issues are closed, close Epic: Manage CodeQL deployment #5005 as completed.

Resources/Instructions

• GitHub CodeQL documentation
• Guides: 2FA webpage
• This issue is part of Epic: Manage CodeQL deployment #5005

[github-actions]

Hi @jackyuan1, thank you for taking up this issue! Hfla appreciates you :)

Do let fellow developers know about your:-
i. Availability: (When are you available to work on the issue/answer questions other programmers might have about your issue?)
ii. ETA: (When do you expect this issue to be completed?)

You're awesome!

P.S. - You may not take up another issue until this issue gets merged (or closed). Thanks again :)

[jackyuan1]

Availability: Wednesday/Thursday 12-5p
ETA: Dec 13

[jackyuan1]

Analysis- The "categ" variable is used for iterating the "this.options.data" array. If a similar variable name were to be used else where, it could cause a bug in assigning the "val" variable to the specific item in "this.options.data[categ]".

Recommendation- Update code to declare categ as a local variable to narrow its scope.