Ah yes, blacklist filtering, the security model of a person who thinks threats are things you can just find-and-replace. Drop a backslash and watch your quote handling fall on its ass. Removing the quote before the backslash means an escaped quote sails through, so congratulations on shipping a quote scrubber that does not scrub quotes.