remove special chars from whitelist