From a401ea9216b10a07e22659092eb99b7a8fb95403 Mon Sep 17 00:00:00 2001 From: Kazuhito Yokoi Date: Tue, 30 Dec 2025 00:47:11 +0900 Subject: [PATCH] Stricter validator for flow file name in project feature --- .../@node-red/editor-client/src/js/ui/projects/projects.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/node_modules/@node-red/editor-client/src/js/ui/projects/projects.js b/packages/node_modules/@node-red/editor-client/src/js/ui/projects/projects.js index f32e14c33..a49b0dd08 100644 --- a/packages/node_modules/@node-red/editor-client/src/js/ui/projects/projects.js +++ b/packages/node_modules/@node-red/editor-client/src/js/ui/projects/projects.js @@ -720,7 +720,7 @@ RED.projects = (function() { var validateForm = function() { var valid = true; var flowFile = projectFlowFileInput.val(); - if (flowFile === "" || !/\.json$/.test(flowFile)) { + if (flowFile === "" || !/^[a-zA-Z0-9\-_]+\.json$/.test(flowFile)) { valid = false; if (!projectFlowFileInput.hasClass("input-error")) { projectFlowFileInput.addClass("input-error"); @@ -1142,7 +1142,7 @@ RED.projects = (function() { } else if (projectType === 'empty') { var flowFile = projectFlowFileInput.val(); - if (flowFile === "" || !/\.json$/.test(flowFile)) { + if (flowFile === "" || !/^[a-zA-Z0-9\-_]+\.json$/.test(flowFile)) { valid = false; if (!projectFlowFileInput.hasClass("input-error")) { projectFlowFileInput.addClass("input-error");