Comment 6 for bug 1217194

Although a more performant regex engine is nice I dont think it actually solves the problem, just (possibly) makes it a little bit harder to make malicious input.

Could we use fnmatch (http://docs.python.org/2/library/fnmatch.html) rather than true regex's? Looking at the tests they appear all to be trivially convertable to this format.