sync regex here with forbidden characters, also that this never shoul…

…d be possible because adapter.js replaces them beforehand, so only relevant for "system level" stuff not coming from an adapter

lib/objects/objectsInMemServer.js

@@ -2,9 +2,9 @@
  *      Object DB in memory - Server
  *
  *      Copyright 2013-2018 bluefox <[email protected]>
- *      
+ *
  *      MIT License
- *      
+ *
  */
 
 /* jshint -W097 */
@@ -99,7 +99,7 @@ function ObjectsInMemServer(settings) {
     let preserveSettings = [];
     let regUser          = /^system\.user/;
     let regGroup         = /^system\.group/;
-    let regCheckId       = /[*?\[\]]/;
+    let regCheckId       = /[\]\[*,;'"`<>\\?]/;
     let defaultAcl       = {
         groups: [],
         acl: {
@@ -2972,7 +2972,7 @@ function ObjectsInMemServer(settings) {
                 }
             }
         }
-        
+
         if (defaultNewAcl && options.ownerGroup && objects[id].acl && !objects[id].acl.ownerGroup) {
             objects[id].acl.ownerGroup = options.ownerGroup;
         }