Show HN: Career Fair – Learn about Jobs by People Who Have Done Them

I noticed the below vuln because you currently aren't filtering inputs sufficiently. The validation looked weak as it was rendering html, so I did a bit of testing and found you can run javascript hidden in an image tag like the below:

alert("XSS")"\>

You can see this running on the below:

https://www.careerfair.io/reviews/test

I suspect if I put this in the job name it might actually run the javascript when anyone visits the homepage?

Take for instance astronaut. Although it offered some nice antidotes, I still don't know what its like to be an astronaut.

From the interview:

> What was your biggest roadblock to becoming an astronaut, and how did you overcome it? ...Being able to be brave enough to actually apply. Too many people are too shy or afraid of failure. If there's something you want to do you just have to go for it.

That's a bit of a non-answer. It's like asking someone how they ran a 100 mile ultra-marathon, and they said "one step at a time!". I'd be more interested in the qualifications and skills they're looking for? What age are astronauts and where do they recruit from? How much time do you spend in space or otherwise away from your family. Are all the jobs clustered in one geographical location?

Also, I think you should make the About section feel a bit more personal. You linked to your personal twitter elsewhere but not in this page.

- A list of industry-specific terminology used in the interview at the top. I was unfamiliar with the concept of financial modeling, would have been nice to have a quick definition from the interviewee's own words.

- The ability for readers to ask followup questions (without the guarantee that they be answered) and/or a way to contact the interviewee directly in an anonymous way (definitely way beyond MVP, but it's fun to think about)