untaint_pattern => qr|^([-+@\w./:\\]+)$|