Don't treat field_intro_text as HTML in benefits hub (landing_page)

src/components/benefitsHub/template.test.tsx

@@ -83,6 +83,33 @@ describe('BenefitsHub with valid data', () => {
     ).toBeInTheDocument()
   })
 
+  test('intro text splits on CRLF and renders br between segments', () => {
+    const { container } = render(
+      <BenefitsHub
+        {...mockBenefitsData}
+        intro={'First line\r\nSecond line\r\nThird'}
+      />
+    )
+
+    const introRoot = container.querySelector('.va-introtext')
+    expect(introRoot?.querySelectorAll('br')).toHaveLength(2)
+    expect(introRoot).toHaveTextContent('First lineSecond lineThird')
+  })
+
+  test('intro text shows angle brackets as literal text, not nested markup', () => {
+    const introWithEscapedTags =
+      'Plain.\r\n<p>If you care</p>\r\n<script>evil()</script>'
+    const { container } = render(
+      <BenefitsHub {...mockBenefitsData} intro={introWithEscapedTags} />
+    )
+
+    const introParagraph = container.querySelector('p.va-introtext')
+    expect(introParagraph).toBeInTheDocument()
+    expect(
+      screen.getByText(/<script>evil\(\)<\/script>/, { exact: false })
+    ).toBeInTheDocument()
+  })
+
   test('renders BenefitsHub component with icon', () => {
     render(
       <BenefitsHub

src/components/benefitsHub/template.tsx

@@ -1,3 +1,4 @@
+import { Fragment } from 'react'
 import { getHubIcon } from '@/lib/utils/benefitsHub'
 import { recordEvent } from '@/lib/analytics/recordEvent'
 import { BenefitsHub as FormattedBenefitsHub } from './formatted-type'
@@ -42,10 +43,14 @@ export function BenefitsHub({
         <h1>{title}</h1>
       )}
       {intro && (
-        <p
-          className="va-introtext"
-          dangerouslySetInnerHTML={{ __html: intro }}
-        />
+        <p className="va-introtext">
+          {intro.split('\r\n').map((segment, index) => (
+            <Fragment key={index}>
+              {index > 0 ? <br /> : null}
+              {segment}
+            </Fragment>
+          ))}
+        </p>
       )}
       {spokes?.length > 1 && <va-on-this-page></va-on-this-page>}
       {alert && <AlertBlock {...alert} />}