Fix regex with security issue