regex denial of service attack code