diff --git a/scm-webapp/src/main/java/sonia/scm/api/v2/resources/RepositoryImportResource.java b/scm-webapp/src/main/java/sonia/scm/api/v2/resources/RepositoryImportResource.java
index f5731d3e7e..e3a2763d85 100644
--- a/scm-webapp/src/main/java/sonia/scm/api/v2/resources/RepositoryImportResource.java
+++ b/scm-webapp/src/main/java/sonia/scm/api/v2/resources/RepositoryImportResource.java
@@ -159,7 +159,8 @@ public class RepositoryImportResource {
     )
   )
   public Response importFromUrl(@Context UriInfo uriInfo,
-                                @PathParam("type") String type, @Valid RepositoryImportDto request) {
+                                @Pattern(regexp = "\\w{1,10}") @PathParam("type") String type,
+                                @Valid RepositoryImportDto request) {
     RepositoryPermissions.create().check();
 
     Type t = type(manager, type);