400 when a path is entered

src/main/kotlin/starter/Server.kt

@@ -33,6 +33,13 @@ class Server(
 
             val projectName = inputs.find { it.name == "name" }!!.value!!
             val basePackage = inputs.find { it.name == "basePackage" }!!.value!!
+
+            if (basePackage.contains("/") || basePackage.contains("..")) {
+                ctx.status(400)
+                ctx.result("Invalid Base Package")
+                return@post
+            }
+
             val project = Project(projectName, basePackage, inputs, deps)
 
             ctx.contentType("application/zip")