First, I don't understand the last item of the list of requirements of Regular Expression:
- Special characters are allowed with restrictions including:
The second, you should ALWAYS validate regular expression on server side. Because unless you are doing so, validating has no sense - client may use his own tool to send request to server. client validation will be good for warning user about mistakes prior to submission of the form. And yes, you should validate all fields on form submission. You could run any JavaScript function. <form>
tag has event onSubmit()
for that.