Correct security risk with regular expression.