Add a check to ensure repository names are valid according to an extended set of rules.

Fixes #534

endpoints/api/repository.py

@@ -23,6 +23,7 @@ from auth.permissions import (ModifyRepositoryPermission, AdministerRepositoryPe
                               CreateRepositoryPermission)
 from auth.auth_context import get_authenticated_user
 from auth import scopes
+from util.names import REPOSITORY_NAME_REGEX
 
 
 logger = logging.getLogger(__name__)
@@ -104,6 +105,10 @@ class RepositoryList(ApiResource):
       if visibility == 'private':
         check_allowed_private_repos(namespace_name)
 
+      # Verify that the repository name is valid.
+      if not REPOSITORY_NAME_REGEX.match(repository_name):
+        raise InvalidRequest('Invalid repository name')
+
       repo = model.repository.create_repository(namespace_name, repository_name, owner, visibility)
       repo.description = req['description']
       repo.save()