--- Sandbox.pm	2006-04-10 17:28:27.000000000 +0600
+++ ../Sandbox.pm	2006-04-12 11:10:01.000000000 +0600
@@ -217,8 +217,8 @@
                         }
                     } elsif ($flag =~ /S/) {
                         # Harmless string.
-                        if ( $param =~ /^([0-9A-Za-z.+_\-]{0,30})$/ ) {
-                            push @targs, $1;
+                        if ( $param !~ /$TWiki::cfg{NameFilter}/) {
+                            push @targs, untaintUnchecked( $param );
                         } else {
                             throw Error::Simple( "invalid string argument '$param' $t" );
                         }
