allow only a-zA-Z for keyboard layout

server/internal/xorg/xorg.go

@@ -13,6 +13,7 @@ import (
 	"sync"
 	"time"
 	"unsafe"
+	"regexp"
 
 	"n.eko.moe/neko/internal/types"
 )
@@ -214,6 +215,10 @@ func SetKeyboard(layout string) {
 	mu.Lock()
 	defer mu.Unlock()
 
+	if !regexp.MustCompile(`^[a-zA-Z]+$`).MatchString(layout) {
+		return
+	}
+
 	layoutUnsafe := C.CString(layout)
 	defer C.free(unsafe.Pointer(layoutUnsafe))