== Ask Yourself Whether * The input is user-controlled. * The input size is not restricted to a small number of characters. * There is no timeout in place to limit the regex evaluation time. There is a risk if you answered yes to any of those questions.