untaint_pattern => qr|^([-+@\w./:]+)$|