Only allow `[a-zA-Z0-9$_]` in JSON-P callback names

Ref. https://github.com/mezzoblue/csszengarden.com/pull/24/files#r4150859.