You completely ignore /, which is used on everything except Windows. Also, I'm not seeing much of a point to this sanitation. Just let people put what they want in there.