These are characters that need to be url-encoded I guess? I don't know whether we'll someday need to allow some of them, but I guess I am fine with worrying about it if/when someone complains. It is mostly driven by stash/github anyway.