Disallow \ client-side