Replace banned chars rather than reject the upload