Yes, good call.  Backslashes in regexp are ridiculous; this is how it needs to look:
```
private static Pattern UNSAFE_TOKENS = Pattern.compile("[.\\\\:/]");
```