allow only hex values