nostr:npub12lc4mflfy6dc26vhlxdrluxf76pknrrtyrpv4zycld5vjkdgaf2s0ne4yu I mean, you name it (pun definitely intended).

Since the input variables end up getting evaluated in the regex parsers themselves, I'm sure they couldn't possibly be used for interesting mischief.