We had an overly short blacklist of characters, that failed to include & or | and who knows what other CMD.EXE punctuation. So use a whitelist instead.