If I wanted to create a string which is guaranteed not to represent a filename, I could put one of the following characters in it on Windows:
\\ / : * ? | &l
There are almost no restrictions - apart from '/' and '\0', you're allowed to use anything. However, some people think it's not a good idea to allow this much flexibility.
'/'
'\0'