Is it possible to allow a field to have a . in the name. Currently SqlInjectionAttackFilter only allows A-Za-z0-9_