secure code review regex