fix: Validate Release string

CHANGELOG.md

@@ -4,7 +4,7 @@
 
 ### Fixes
 
-- The sample C plugin does no longer get inlined ([#391](https://github.com/getsentry/sentry-unity/pull/391))
+- Added missing release string validation ([#389](https://github.com/getsentry/sentry-unity/pull/389))
 - Sentry internal logs no longer show up as breadcrumbs ([#377](https://github.com/getsentry/sentry-unity/pull/377))
 - Fixed missing context data when initializing SDK programmatically ([#376](https://github.com/getsentry/sentry-unity/pull/376))
 - Fixed CaptureInEditor flag when initializing SDK programmatically ([#370](https://github.com/getsentry/sentry-unity/pull/370))

src/Sentry.Unity/SentryOptionsUtility.cs

@@ -1,3 +1,5 @@
+using System.Linq;
+using System.Text.RegularExpressions;
 using Sentry.Unity.Integrations;
 
 namespace Sentry.Unity
@@ -65,11 +67,18 @@ public static void SetDefaults(ScriptableSentryUnityOptions scriptableOptions)
             scriptableOptions.DiagnosticLevel = SentryLevel.Warning;
         }
 
-        private static string Release(IApplication application) =>
-            application.ProductName is string productName
-            && !string.IsNullOrWhiteSpace(productName)
-                ? $"{productName}@{application.Version}"
-                : $"{application.Version}";
+        private static string Release(IApplication application)
+        {
+            if (application.ProductName is string productName
+                && !string.IsNullOrWhiteSpace(productName)
+                && productName.Any(c => c != '.')) // productName consisting solely of '.'
+            {
+                productName = Regex.Replace(productName, @"\n|\r|\t|\/|\\|\.{2}|@", "_");
+                return $"{productName}@{application.Version}";
+            }
+
+            return application.Version;
+        }
 
         private static string Environment(IApplication application, bool isBuilding) => (application.IsEditor && !isBuilding) ? "editor" : "production";
 

test/Sentry.Unity.Tests/SentryOptionsUtilityTests.cs

@@ -29,6 +29,38 @@ public void SetDefaults_Release_IsApplicationProductNameAtVersion()
             Assert.AreEqual($"{productName}@{version}", options.Release);
         }
 
+        [Test]
+        [TestCase("\n")]
+        [TestCase("\t")]
+        [TestCase("/")]
+        [TestCase("\\")]
+        [TestCase("..")]
+        [TestCase("@")]
+        public void SetDefaults_Release_DoesNotContainInvalidCharacters(string invalidString)
+        {
+            var options = new SentryUnityOptions();
+            var prefix = "test";
+            var suffix = "application";
+            var version = "0.1.0";
+            var application = new TestApplication(productName: $"{prefix}{invalidString}{suffix}", version: version);
+
+            SentryOptionsUtility.SetDefaults(options, application);
+
+            Assert.AreEqual($"{prefix}_{suffix}@{version}", options.Release);
+        }
+
+        [Test]
+        public void SetDefaults_Release_IgnoresDotOnlyProductNames()
+        {
+            var options = new SentryUnityOptions();
+            var version = "0.1.0";
+            var application = new TestApplication(productName: ".........", version: version);
+
+            SentryOptionsUtility.SetDefaults(options, application);
+
+            Assert.AreEqual($"{version}", options.Release);
+        }
+
         [Test]
         public void SetDefaults_Environment_IsEditorInEditor()
         {