sanitize create project name

sillsdev · Jun 14, 2024 · fef78c6 · fef78c6
1 parent 64c53e7
commit fef78c6
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/backend/LocalWebApp/Routes/ProjectRoutes.cs b/backend/LocalWebApp/Routes/ProjectRoutes.cs
@@ -46,15 +46,14 @@ public static IEndpointConventionBuilder MapProjectRoutes(this WebApplication ap
 
             return projects.Values;
         });
-        Regex alphaNumericRegex = ProjectName();
         group.MapPost("/project",
             async (ProjectsService projectService, string name) =>
             {
                 if (string.IsNullOrWhiteSpace(name))
                     return Results.BadRequest("Project name is required");
                 if (projectService.ProjectExists(name))
                     return Results.BadRequest("Project already exists");
-                if (!alphaNumericRegex.IsMatch(name))
+                if (!ProjectName().IsMatch(name))
                     return Results.BadRequest("Only letters, numbers, '-' and '_' are allowed");
                 await projectService.CreateProject(name, afterCreate: AfterCreate);
                 return TypedResults.Ok();
@@ -82,6 +81,8 @@ public static IEndpointConventionBuilder MapProjectRoutes(this WebApplication ap
                 string newProjectName
                 ) =>
             {
+                if (!ProjectName().IsMatch(newProjectName))
+                    return Results.BadRequest("Project name is invalid");
                 var foundProjectGuid = await lexboxProjectService.GetLexboxProjectId(newProjectName);
                 if (foundProjectGuid is null)
                     return Results.BadRequest($"Project code {newProjectName} not found on lexbox");