remove unsafe characters

Author: michaeloffner

source/java/src/org/lucee/extension/guard/util/Canonicalize.java

@@ -42,9 +42,11 @@ private static boolean isSafe(char c) {
 		if (Character.isLetterOrDigit(c)) {
 			return true;
 		}
+
 		// Allow common "inert" punctuation
 		switch (c) {
 		case ' ':
+		case '#':
 		case '-':
 		case '_':
 		case '.':
@@ -53,6 +55,23 @@ private static boolean isSafe(char c) {
 		case ',':
 		case '!':
 		case '?':
+		case '$':
+		case '&':
+		case '*':
+		case '(':
+		case ')':
+		case '+':
+		case '{':
+		case '}':
+		case '[':
+		case ']':
+		case '<':
+		case '>':
+		case '"':
+		case ';':
+		case '~':
+		case '`':
+		case '\'':
 			return true;
 		default:
 			return false;