whitelist accepted chars in arguments.

The rest of the code is too complex to be safe...