Throw on all kinds of disallowed character references

Ref. #13.