Either way the PR (https://github.com/opencart/opencart/pull/12949/files) should have been accepted. Clearly the [^a-zA-z0-9_] regex will not do what it appears to be intended to do without the delimiters.