update drupal regex

This should fix #4484

To verify just test it against a vulnerable drupal installation