Hello,
You should review this document for your request.
The default characters listed above are always forbidden unless you override the CMSForbiddenURLValues key in the /configuration/appSettings section of your application's web.config file.
For example:
<add key="CMSForbiddenURLValues" value="$\/:?"<>|&%.'#[] =" />
If you have some other rules for redirecting requests another pages, you can develop custom http handler
Regards.