remove all characters that aren't in the allowed charaters list, to prevent any injection attacks on the LEAP scripts