title: Why is my regex whitelist not catching brackets?
body: <p>My regex whitelist is testing against query parameters. When I pass a parameter of <code>&lt;img&gt;</code>, it's not catching the <code>&lt;</code> or <code>&gt;</code></p>
  
  <pre><code>&lt;%
  Function FoundSpecialChar(strInput)
     On Error Resume Next 
      Dim objRegExp
      Set objRegExp = New Regexp
      objRegExp.IgnoreCase = True
      objRegExp.Global = True
  
      objRegExp.Pattern= "^[^-A-Za-z0-9 ]+$"  
  
      if objRegExp.Test(strInput) then
          FoundSpecialChar= true
          exit function
      end if
  
      FoundSpecialChar= false
  
      Set objRegExp = Nothing
  End Function
  %&gt;
  </code></pre>