SECURITY: XSS in langconverter when regex hits pcre.backtrack_limit