That’s pretty vague.. can you provide a specific example and I’ll take a look.
I tried to do this request with your plugin active: http://local.wordpress.dev/wp-admin/admin-ajax.php?action=us_counts&nonce=45c73af6b9&args={%22urls%22:[{%22url%22:%22http://local.wordpress.dev/post-name/%22,%22networks%22:[%22facebook%22,%22twitter%22,%22google%22,%22stumble%22]}]}
And it was blocked – I did it on a VVV install.
Let me know if that is enough for you.
Just double-checked on default WP and the request went through. It must be something else that is blocking the request on your site; there is nothing in BBQ that blocks any of those characters.
Hey I just retested and it looks like BBQ may be blocking some part of that string. If you want to troubelshoot and figure out exactly which string/characters are involved, you can use the whitelist plugin to allow access as needed:
http://perishablepress.com/bbq-whitelist-blacklist/