[Security] fixed a dot in a regex

| Q             | A
| ------------- | ---
| Doc fix?      | yes
| New docs?     | no
| Applies to    | 2.2+

The current code works, but the dot should still be escaped to make it clear that this directive takes a regex.