fix #316

src/files.jl

@@ -249,6 +249,22 @@ end
 
 getoutput(controller) = gethub(controller)[:output]
 
+function valid_filename(name)
+    # adapted from NyxUI.jl (MIT license, same author)
+    windows_extra = "|:*?<>"
+    for c in "./\\'\"`" * windows_extra
+        if c in name
+            return false
+        end
+    end
+    for nonprintable in 0x0:0x31
+        if nonprintable in name
+            return false
+        end
+    end
+    return true
+end
+
 interpolate(s="yyyymmdd_HHMMSS") = Dates.format(Dates.now(), s)
 
 function savetofile(controller, file; datafile=nothing, merge=false)
@@ -474,6 +490,11 @@ function getoutputfile(controller)
             dir = cwd(controller)
             if isnothing(file)
                 outputfile.name.val = "{yyyymmdd_HHMMSS}.label"
+            elseif !valid_filename(file)
+                @warn "Invalid filename; saving to date_time format instead" file
+                file = "{yyyymmdd_HHMMSS}.label"
+                savetofile(hub, file)
+                reset!(outputfile)
             elseif isfile(joinpath(dir, file))
                 twooptiondialog(hub, outputfile.merge,
                     "File already exists",

src/larvatagger.js

@@ -118,6 +118,7 @@ const LarvaTagger = (function () {
 		return false;
 	}
 
+	// TODO: validate filepath similarly to valid_filename in files.jl
 	function setOutputFilename(obs) {
 		var defaultfilepath = obs.value;
 		if (defaultfilepath === null) {