$tainted =~ /\A([a-zA-Z0-9]{1-16})\z/i