diff --git a/src/assets/js/blog.js b/src/assets/js/blog.js
index 9566ffd..cb8baf5 100644
--- a/src/assets/js/blog.js
+++ b/src/assets/js/blog.js
@@ -90,6 +90,7 @@
     var type = hash.slice(0, slash);
     var slug = hash.slice(slash + 1);
     if (!slug || (type !== "blog" && type !== "projects")) return;
+    if (!/^[a-z0-9_-]+$/i.test(slug)) return;
     var fragUrl = "/fragments/" + type + "/" + slug + "/";
     WM.showAt("win-" + type, fragUrl, "/fragments/" + type + "/", function (c) {
       injectShare(c, fragUrl);