> The list was a regex ...

Regexpes for security allow lists: what could possibly every go wrong uh!?