From bfed98b523b1bfae1a3c9396f399b7efee9b2aa1 Mon Sep 17 00:00:00 2001
From: Rotimi Best <best@classroomio.com>
Date: Fri, 15 Nov 2024 02:40:32 +0100
Subject: [PATCH] chore: validate domain on server

---
 apps/dashboard/src/routes/api/domain/+server.ts | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/apps/dashboard/src/routes/api/domain/+server.ts b/apps/dashboard/src/routes/api/domain/+server.ts
index 0142488e..613b6bba 100644
--- a/apps/dashboard/src/routes/api/domain/+server.ts
+++ b/apps/dashboard/src/routes/api/domain/+server.ts
@@ -17,6 +17,10 @@ export async function POST({ request }) {
     return json({ success: false, message: 'Missing fields' }, { status: 400 });
   }
 
+  if (params?.domain?.includes('classroomio')) {
+    return json({ success: false, message: 'Domain cannot contain classroomio' }, { status: 400 });
+  }
+
   let user;
   try {
     const { data } = await supabase.auth.getUser(accessToken);