[SECURITY] security(backend): Rate Limiting & Input Sanitization for APIs

[chiscookeke11]

[SECURITY] security(backend): Rate Limiting & Input Sanitization for APIs

Metadata

Field	Value
Domain	Security
Difficulty	Medium (3–5 Days)
Effort Estimate	effort: 6h
Priority	P1-High
Labels	security, backend, help wanted
Target Branch	master
Depends On	None

🎯 Context & Goal

Financial gaming platforms handling decentralized cryptocurrency escrows demand top-tier security standards. In the security and performance domain, implements express-rate-limit and input parameter sanitization to protect against api brute-forcing and dos. Implementing this security safeguard prevents unauthorized balance transfers, exploit vectors, and client-side tampering. This issue provides full remediation steps, target file paths, and test requirements targeting the master branch.

📂 Target Files

• backend/server.js
• backend/middleware/rateLimiter.js

📋 Implementation Tasks

• Task: Implement security safeguard for security(backend): Rate Limiting & Input Sanitization for APIs in backend/server.js.
• Task: Write exploit simulation test asserting vulnerability is blocked.
• Task: Verify zero regressions across existing functionality.

🛠️ Technical Guidance

Apply defense-in-depth principles and never trust client-supplied input without server verification.

🔗 References & Related

• Reference file: backend/server.js
• Reference file: backend/middleware/rateLimiter.js

⏳ Delivery Window

This issue should be completed within 3 day(s) of assignment.

Contribution Workflow

1. Branch off master: git checkout -b feature/descriptive-name master
2. Implement all tasks in the checklist above.
3. Run all CI checks locally (see DEVELOPMENT.md).
4. Open a Pull Request targeting master.
5. Link this issue in your PR description: Closes #136.

✅ Acceptance Criteria

• All implementation tasks listed above are fully completed.
• Code compiles and passes all local CI checks.
• PR targets master branch.
• PR description references this issue.

[aryansinha1908]

I would like to work on this issue, please. I have experience adding rate limiting and input sanitization to APIs.

[Prashasti-Shrivastava]

i would like to work on this issue. Please assign it to me