tag validation, permit + or # sign