@peksilli I finally used the one-liner of @jordansissel to generate it. The file name must follow Microsoft Windows file name conventions. However, user data placed into a script would need JavaScript specific output encoding. If it is essential that disposable email addresses are blocked, then registrations should only be allowed from specifically-allowed email providers. In the Endevor Package Editor, select the command again and click the Move Up or Move Down buttons from the Command Control. As an example, the following are all considered to be valid email addresses: Properly parsing email addresses for validity with regular expressions is very complicated, although there are a number of publicly available documents on regex. Regular expressions for any other structured data covering the whole input string. The most common way to do this is to send an email to the user, and require that they click a link in the email, or enter a code that has been sent to them. The email address is a reasonable length: The total length should be no more than 254 characters. Uploaded files should be analyzed for malicious content (anti-malware, static analysis, etc). Input validation can be implemented using any programming technique that allows effective enforcement of syntactic and semantic correctness, for example: It is a common mistake to use block list validation in order to try to detect possibly dangerous characters and patterns like the apostrophe ' character, the string 1=1, or the