Skip to content

[TESTING] Write security tests for injection vulnerabilities #352

@dev-fatima-24

Description

@dev-fatima-24

Priority: high

Description

API endpoints that accept wallet addresses and other inputs should be tested against injection payloads to verify they are handled safely.

Acceptance Criteria

  • Test: SQL injection payload in wallet address returns 400 (not 500)
  • Test: NoSQL injection payload in request body is rejected by validation
  • Test: Oversized request body (>1MB) returns 413
  • Test: Null byte in wallet address is rejected
  • All injection tests result in 400 responses, not unhandled errors

Metadata

Metadata

Assignees

Labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions