You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Creating a project with a special character (e.g. +) in the Project name field causes the API to return 400 Bad Request, but the frontend does not surface a field-level validation message. Instead, the React app crashes with minified
errors #418 and #423, and the user is left with no feedback about what went wrong.
Steps to reproduce
Self-host Plane (community edition, stable images) behind a reverse proxy.
Sign in, create a workspace.
Click Create Project.
Enter a project name containing + (e.g. Foo + Bar).
Pick any valid identifier and submit.
Expected behavior
Inline validation error on the Name (or Identifier) field telling the user which characters are not allowed.
No console crash; form remains interactive so the user can correct the input.
Actual behavior
POST /api/workspaces/{slug}/projects/ returns 400 (duration ~40 ms — serializer rejection).
Describe the bug
Creating a project with a special character (e.g.
+) in the Project name field causes the API to return400 Bad Request, but the frontend does not surface a field-level validation message. Instead, the React app crashes with minifiederrors #418 and #423, and the user is left with no feedback about what went wrong.
Steps to reproduce
stableimages) behind a reverse proxy.+(e.g.Foo + Bar).Expected behavior
Actual behavior
POST /api/workspaces/{slug}/projects/returns400(duration ~40 ms — serializer rejection).Uncaught Error: Minified React error feat: issue filter views #418
Uncaught Error: Minified React error feat: jitsu events for sign in and sign up #423
...
store-context-*.js Failed to create project from project store
Environment
stable(self-hosted,makeplane/plane-*:stable, pulled 2026-04-28)plane-proxy(Caddy) → external nginx → Cloudflare TunnelSuggested fix
Additional context
The same pattern likely affects any field whose validation is enforced only server-side. Workaround: keep names and
identifiers strictly alphanumeric.