Fix regular expressions that are vulnerable to ReDoS

[ghost]

https://en.wikipedia.org/wiki/ReDoS
https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS

[ghost]

For example

https://ihateregex.io/expr/email
https://ihateregex.io/expr/email-2

Probably not vulnerable to ReDoS but not entirely correct because there is no limit

geon@ihateregex.ioooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

Also

https://stackoverflow.com/questions/52756066/is-email-regex-pattern-suggested-by-w3c-spec-prone-to-redos-attacks
https://html.spec.whatwg.org/multipage/forms.html#valid-e-mail-address