Zipcar does the same thing: only numbers and letters. Also, try putting '<' or '>' in your password -- they'll complain about how you're putting HTML tags in your password.
Ooh, that's scary. Being so worried about XSSing themselves when they look at your password and so uncertain of their HTML sanitisation that they reduce the keyspace... that's a special kind of special.
Ooh, that's scary. Being so worried about XSSing themselves when they look at your password and so uncertain of their HTML sanitisation that they reduce the keyspace... that's a special kind of special.