It seems like acceptance of special character by a website depends on
(1) Framework
(2) Additional policies enforced by an admin
For instance,
@%+\/'!#$^?:.(){}[]~ Supported by Oracle id connection
~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/ Supported by MS Active directory
Note that | works for MS, but not Oracle. I realize that admin can enforce anything and an esoteric framework or zealous admin can restrict any character, but which chars are commonly accepted?
What is the subset, generally accepted by most services?
I read similar questions:
ftp: special characters in password
Special characters in ssmtp password
Those deal with special situations.
