Do not warn when pasting non-dangerous characters

The old code was filtering things like characters from Private Use Area
and surrogates (used to represent code points > 0xFFFF, e.g. emojis). In
worst case, when pasted, they appear as <?>. The filter is now limited
to all control characters except TAB, CR, LF.