From cbce56cf772b65f0368eaba7a78cd84442322c9f Mon Sep 17 00:00:00 2001
From: LordMathis <matus@namesny.com>
Date: Sat, 19 Jul 2025 12:01:33 +0200
Subject: [PATCH] Validate instance name

---
 server/pkg/manager.go | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/server/pkg/manager.go b/server/pkg/manager.go
index 1558022..2bc6e28 100644
--- a/server/pkg/manager.go
+++ b/server/pkg/manager.go
@@ -49,8 +49,8 @@ func (im *instanceManager) CreateInstance(options *InstanceOptions) (*Instance,
 	}
 
 	// Check if name is provided
-	if options.Name == "" {
-		return nil, fmt.Errorf("instance name cannot be empty")
+	if options.Name == "" || !isValidInstanceName(options.Name) {
+		return nil, fmt.Errorf("invalid instance name: %s", options.Name)
 	}
 
 	// Check if instance with this name already exists
@@ -71,7 +71,17 @@ func (im *instanceManager) CreateInstance(options *InstanceOptions) (*Instance,
 	im.instances[instance.Name] = instance
 
 	return instance, nil
+}
 
+// isValidInstanceName checks if the instance name is valid.
+func isValidInstanceName(name string) bool {
+	// A simple validation: name should only contain alphanumeric characters, dashes, and underscores
+	for _, char := range name {
+		if !(('a' <= char && char <= 'z') || ('A' <= char && char <= 'Z') || ('0' <= char && char <= '9') || char == '-' || char == '_') {
+			return false
+		}
+	}
+	return true
 }
 
 // GetInstance retrieves an instance by its name.