Fix the input santization: allow also a dot '.'

It is still part of the valid characters (for example for
...&path=foobar.html)