changes regular expression in format validation because of security risks