Bug fix/custom query names (#8579)

* restricted allowed custom query names

* changelog

CHANGELOG

@@ -1,6 +1,9 @@
 devel
 -----
 
+* fixed internal issue #3789: restricted the allowed query names for user
+  defined custom queries within the web ui.
+  
 * upgraded bundled RocksDB version to 6.0
 
 * added "--log.ids" option to arangod

js/apps/system/_admin/aardvark/APP/frontend/js/views/queryView.js

@@ -1569,8 +1569,8 @@
           false,
           [
             {
-              rule: Joi.string().required(),
-              msg: 'No query name given.'
+              rule: Joi.string().regex(/^[a-zA-Z0-9\-_]*$/).required(),
+              msg: 'A query name is required. Characters, numbers and the symbols "_" and "-" are allowed.'
             }
           ]
         )