diff --git a/appview/settings/settings.go b/appview/settings/settings.go index 1beaa07c..ccdf2af0 100644 --- a/appview/settings/settings.go +++ b/appview/settings/settings.go @@ -118,6 +118,11 @@ func (s *Settings) claimSitesDomain(w http.ResponseWriter, r *http.Request) { return } + if len(subdomain) < 4 { + s.Pages.Notice(w, "settings-sites-error", "Subdomain must be at least 4 characters long.") + return + } + if !isValidSubdomain(subdomain) { s.Pages.Notice(w, "settings-sites-error", "Invalid subdomain. Use only lowercase letters, digits, and hyphens. Cannot start or end with a hyphen.") return