I don't think there is a configuration setting anywhere to allow preventing characters in names. I will second that prevention of the ampersand character in file and folder names should be added. Not that this would prevent one from creating a folder or file with an ampersand and then uploading it to the site via FTP or some other means that isn't through mojoPortal.
Thanks,
Joe D.