From 2cb70969bfc156a1f64f1365a57ff88bb208af10 Mon Sep 17 00:00:00 2001
From: Yurii <yurikuzn@users.noreply.github.com>
Date: Mon, 2 Mar 2026 20:32:00 +0200
Subject: [PATCH] do not allow forbidden link name

---
 .../Espo/Tools/LinkManager/LinkManager.php    | 22 +++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/application/Espo/Tools/LinkManager/LinkManager.php b/application/Espo/Tools/LinkManager/LinkManager.php
index a999162647..b33661e067 100644
--- a/application/Espo/Tools/LinkManager/LinkManager.php
+++ b/application/Espo/Tools/LinkManager/LinkManager.php
@@ -278,6 +278,9 @@ class LinkManager
             throw new Conflict("Field $entityForeign::$linkForeign already exists.");
         }
 
+        $this->checkLinkNameNotForbidden($link);
+        $this->checkLinkNameNotForbidden($linkForeign);
+
         if ($entity === $entityForeign) {
             if (
                 $link === lcfirst($entity) ||
@@ -1196,4 +1199,23 @@ class LinkManager
 
         $this->metadata->save();
     }
+
+    /**
+     * @throws Conflict
+     */
+    private function checkLinkNameNotForbidden(string $link): void
+    {
+        if (
+            in_array($link, NameUtil::FIELD_FORBIDDEN_NAME_LIST)
+        ) {
+            throw Conflict::createWithBody(
+                "Field '$link' is not allowed.",
+                Error\Body::create()
+                    ->withMessageTranslation('fieldNameIsNotAllowed', 'FieldManager', [
+                        'field' => $link,
+                    ])
+                    ->encode()
+            );
+        }
+    }
 }