The issue was closed by the stale bot a year ago, but imo it is still relevant and not solved.
Can someone please reopen and triage the bug Disallow illegal characters `/ ? < > \ : * | "` and so on in file and folder names · Issue #27891 · nextcloud/server · GitHub ? Or does someone know who to ping so it can be triaged? What info is still needed (label needs info)?