Loosen up WebSecurityUtils.sanitizeString a bit for NMS-6524