Fixes #3461. Remove any special char that can lead to shell/XSS compromises from submitted input.