From dd45b75f86c1377abc323fd00ebbe6a6364efb5e Mon Sep 17 00:00:00 2001
From: HoshinoKoji <hoshino_koji@163.com>
Date: Wed, 16 Apr 2025 15:40:00 +0800
Subject: [PATCH] Loosen restriction on participant IDs

---
 src/index.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/index.js b/src/index.js
index a9728ee..4d1d16a 100644
--- a/src/index.js
+++ b/src/index.js
@@ -63,7 +63,7 @@ export default {
 
 		const expId = url.searchParams.get('expId');
 		const participantId = url.searchParams.get('participantId');
-		const pat = /^[a-zA-Z0-9]{1,64}$/;
+		const pat = /^[a-zA-Z0-9_\-]{1,64}$/;
 		if (!expId || !participantId || expId.includes('/') || !participantId.match(pat)) {
 			// prevent path traversal
 			return new Response('Invalid parameters', { status: 400, headers: corsHeaders });