More illegal characters for report_id validation

Closes #166