Validate user-supplied input in participant and admin portals

[ignatiusm]

Need to sanitise HTML tags and JS payloads from form fields in participant and admin portal.

https://cwe.mitre.org/data/definitions/20.html
https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html
https://cwe.mitre.org/data/definitions/89.html

[ignatiusm]

Planned approach:

• Identify all the common types that related to user input (e.g. application/common/types/api/auth/registerParticipant.ts) in both Admin and Participant portals
• use tsoa/JSDocs to add contraints (min and max lengths) and allowlists (see OWASP recommendations about allowlists vs denylists)
• create userInputValidationRules (or similar named) file in application/common with identical contraints (min and max lengths) and allowlists
• use common userInputValidationRules in relevant sections of user- and admin-client