Also ban U+0009, U+0000A, and U+000D to prevent re-parsing issues.