Apenas [a-zA-Z0-9:_-]. Whitelist via REALTIME_ALLOWED_PREFIXES.
[a-zA-Z0-9:_-]
REALTIME_ALLOWED_PREFIXES