Anyway, this constraint of regular expression cannot stop us to penetrate.
We just exploit that payload which is as same as web10's.