@57f15da7 I mean, you name it (pun definitely intended).

Since the input variables end up getting evaluated in the regex parsers themselves, I'm sure they couldn't possibly be used for interesting mischief.