are there other illegal chars we should remove while we're thinking about this?