fix(security): fix polynomial regular expression (#3502)

fix(security): fix polynomial regular expression (#3502) #6198