Fix scripting vulnerability in regex parsing (thanks zx2c4)