The character class is negated, note where the ^ is...

! /[^a-zA-Z0-9,]/
[download]

...however I'm not sure the double negative is faster enough to warrant not just doing the more obvious...

/^[a-zA-Z0-9,]+$/
[download]

...it's also not stated whether /^$/ is valid or not, which is different for the above two.