Add regex anchors to fix regex sanitizing bypass

Add regex anchors to fix regex sanitizing bypass #28