fix(security): escape regular expression

fix(security): escape regular expression #6194