Ensure LicenseRef file name follows SPDX constraints

SPDX dictates ASCII in the way they refer to the RFC5234 standard and repeat it through the specification. Co-authored-by: Nico Rikken <nico@nicorikken.eu>
fsfe · Apr 27, 2023 · 049ba38 · 049ba38
1 parent f900345
commit 049ba38
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/reuse/download.py b/src/reuse/download.py
@@ -34,7 +34,7 @@
     "https://raw.githubusercontent.com/spdx/license-list-data/master/text/"
 )
 
-REF_RE = re.compile("LicenseRef-.+")
+REF_RE = re.compile("LicenseRef-[a-zA-Z0-9-.]+$")
 
 
 def download_license(spdx_identifier: str) -> str: