Changes:

Added missing commas in blacklist (again),
Fixed illegal character check to allow dashes (per report from tester)