sync regex here with forbidden characters, also that this never should be possible because adapter.js replaces them beforehand, so only relevant for "system level" stuff not coming from an adapter

Author: Apollon77

lib/objects/objectsInMemServer.js

@@ -2,9 +2,9 @@
  *      Object DB in memory - Server
  *
  *      Copyright 2013-2018 bluefox <dogafox@gmail.com>
- *      
+ *
  *      MIT License
- *      
+ *
  */
 
 /* jshint -W097 */
@@ -99,7 +99,7 @@ function ObjectsInMemServer(settings) {
     let preserveSettings = [];
     let regUser          = /^system\.user/;
     let regGroup         = /^system\.group/;
-    let regCheckId       = /[*?\[\]]/;
+    let regCheckId       = /[\]\[*,;'"`<>\\?]/;
     let defaultAcl       = {
         groups: [],
         acl: {
@@ -2972,7 +2972,7 @@ function ObjectsInMemServer(settings) {
                 }
             }
         }
-        
+
         if (defaultNewAcl && options.ownerGroup && objects[id].acl && !objects[id].acl.ownerGroup) {
             objects[id].acl.ownerGroup = options.ownerGroup;
         }