if ($file =~ /^([-\w.]+$/) {
    $file = $1;
} else {
    print "Couldn't untaint \$file!\n";
}