Illegal character validation