Set up your web proxy, and test it here. The field has a validator that only allows valid characters. See if you can circumvent this protection using your proxy!