We should see some tests here that ensure the security of the regexp based matcher, so that we don't have a change accidentally open a security issue.