If all else fails, you might take a look at--and get a good laugh from--Verifying Unicode (The mother of all regex)..

Quick it isn't--but it is thorough and entirely correct according to the XML spec.