Second effort to sanitize input string

diff --git a/MagickCore/property.c b/MagickCore/property.c
index cddd2dc223116caa2b4927517fef25d354ad218f..57caee49ba6db86729c6e8d18b170b3d623f6beb 100644 (file)
--- a/MagickCore/property.c
+++ b/MagickCore/property.c
@@ -2540,8 +2540,8 @@ static const char *GetMagickPropertyLetter(ImageInfo *image_info,
 
       static char
         whitelist[] =
-          "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_- "
-          ".@&;<>()/\\\'\":%=~`";
+          "^-ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"
+          "+&@#/%?=~_|!:,.;()";
 
       WarnNoImageReturn("\"%%%c\"",letter);
       (void) CopyMagickString(value,image->magick_filename,MagickPathExtent);