What would the JavaScript code look like to prevent users from uploading an attachment that contains a special character like "'" or "&" or "%"? Where would it be added in the file object?