Regex character class / - creates unintended range admitting injection chars (", $, &, ')

Regex character class / - creates unintended range admitting injection chars (", $, &, ') #102