scrub values from illegal characters