replace regexp ^ -> \A for security reason