diff --git a/src/main/kotlin/starter/Server.kt b/src/main/kotlin/starter/Server.kt
index 4a2cebc..b3203b2 100644
--- a/src/main/kotlin/starter/Server.kt
+++ b/src/main/kotlin/starter/Server.kt
@@ -33,6 +33,13 @@ class Server(
 
             val projectName = inputs.find { it.name == "name" }!!.value!!
             val basePackage = inputs.find { it.name == "basePackage" }!!.value!!
+
+            if (basePackage.contains("/") || basePackage.contains("..")) {
+                ctx.status(400)
+                ctx.result("Invalid Base Package")
+                return@post
+            }
+
             val project = Project(projectName, basePackage, inputs, deps)
 
             ctx.contentType("application/zip")