fix(security): remedy polynomial regular expression without limiting length to 29 chars

fix(security): remedy polynomial regular expression without limiting length to 29 chars #3983