Adding input sanitization

package.json

@@ -75,6 +75,7 @@
     "ajv": "^8.17.1",
     "ajv-errors": "^3.0.0",
     "ajv-formats": "^3.0.1",
+    "ajv-sanitizer": "^1.2.1",
     "bcrypt": "^5.1.1",
     "connect-flash": "^0.1.1",
     "connect-redis": "^7.1.1",

src/config/ajv.ts

@@ -1,6 +1,7 @@
 import Ajv from 'ajv';
 import addFormats from 'ajv-formats';
 import ajvErrors from 'ajv-errors';
+import ajvSanitizer from 'ajv-sanitizer';
 
 export default (): Ajv => {
     const ajv = new Ajv({
@@ -10,6 +11,7 @@ export default (): Ajv => {
 
     addFormats(ajv);
     ajvErrors(ajv);
+    ajvSanitizer(ajv);
 
     return ajv;
 };

src/types/ajv-sanitizer.d.ts

@@ -0,0 +1 @@
+declare module 'ajv-sanitizer';

src/validators/validateLogin.ts

@@ -12,6 +12,7 @@ const loginSchema: JSONSchemaType<{
     properties: {
         username: {
             type: 'string',
+            sanitize: (data: string) => data.trim().toLowerCase(),
         },
         password: {
             type: 'string',

src/validators/validatePasswordReset.ts

@@ -13,6 +13,7 @@ const passwordResetSchema: JSONSchemaType<{
         email: {
             type: 'string',
             format: 'email',
+            sanitize: (data: string) => data.trim().toLowerCase(),
         },
         _csrf: {
             type: 'string',

src/validators/validateSettings.ts

@@ -27,20 +27,24 @@ const settingsSchema: JSONSchemaType<{
             minLength: 3,
             maxLength: 20,
             pattern: '^[a-zA-Z0-9]*$',
+            sanitize: (data: string) => data.trim().toLowerCase(),
         },
         first_name: {
             type: 'string',
             minLength: 1,
             maxLength: 20,
+            sanitize: (data: string) => data.trim(),
         },
         last_name: {
             type: 'string',
             minLength: 1,
             maxLength: 20,
+            sanitize: (data: string) => data.trim(),
         },
         email: {
             type: 'string',
             format: 'email',
+            sanitize: (data: string) => data.trim().toLowerCase(),
         },
         password: {
             type: 'string',

src/validators/validateSignup.ts

@@ -20,20 +20,24 @@ const signupSchema: JSONSchemaType<{
             minLength: 3,
             maxLength: 20,
             pattern: '^[a-zA-Z0-9]*$',
+            sanitize: (data: string) => data.trim().toLowerCase(),
         },
         first_name: {
             type: 'string',
             minLength: 1,
             maxLength: 20,
+            sanitize: (data: string) => data.trim(),
         },
         last_name: {
             type: 'string',
             minLength: 1,
             maxLength: 20,
+            sanitize: (data: string) => data.trim(),
         },
         email: {
             type: 'string',
             format: 'email',
+            sanitize: (data: string) => data.trim().toLowerCase(),
         },
         password: {
             type: 'string',