diff --git a/packages/node_modules/@node-red/editor-client/src/js/ui/projects/projects.js b/packages/node_modules/@node-red/editor-client/src/js/ui/projects/projects.js
index f32e14c33..a49b0dd08 100644
--- a/packages/node_modules/@node-red/editor-client/src/js/ui/projects/projects.js
+++ b/packages/node_modules/@node-red/editor-client/src/js/ui/projects/projects.js
@@ -720,7 +720,7 @@ RED.projects = (function() {
                         var validateForm = function() {
                             var valid = true;
                             var flowFile = projectFlowFileInput.val();
-                            if (flowFile === "" || !/\.json$/.test(flowFile)) {
+                            if (flowFile === "" || !/^[a-zA-Z0-9\-_]+\.json$/.test(flowFile)) {
                                 valid = false;
                                 if (!projectFlowFileInput.hasClass("input-error")) {
                                     projectFlowFileInput.addClass("input-error");
@@ -1142,7 +1142,7 @@ RED.projects = (function() {
 
                             } else if (projectType === 'empty') {
                                 var flowFile = projectFlowFileInput.val();
-                                if (flowFile === "" || !/\.json$/.test(flowFile)) {
+                                if (flowFile === "" || !/^[a-zA-Z0-9\-_]+\.json$/.test(flowFile)) {
                                     valid = false;
                                     if (!projectFlowFileInput.hasClass("input-error")) {
                                         projectFlowFileInput.addClass("input-error");