Doesn't need to be a full blown regex and definitely not arbitrary code