[dolfje]

I tried to create an account and got the following error message: Invalid characters, allowed are: A-Z a-z 0-9 ä ö ü ß Ä Ö Ü ^ ! $ % / ( ) = ? + # - . , ; : ~ * @ [ ] { } _ ° § What year is it, that we cannot use &?

[datashaman]

I guess if they aren’t diligent with encoding urls that could be an attack vector because it separates query parameters.