[Security] fixed a dot in a regex

The current code works, but the dot should still be escaped to make it clear that this directive takes a regex.