    public static function validateRegex($path, $values)
    {
        $result = array($path => '');

        if (empty($values[$path])) {
            return $result;
        }

        static::testPHPErrorMsg();

        $matches = array();
        // in libraries/ListDatabase.php _checkHideDatabase(),
        // a '/' is used as the delimiter for hide_db
        preg_match('/' . Util::requestString($values[$path]) . '/', '', $matches);

        static::testPHPErrorMsg(false);

        if (isset($php_errormsg)) {
            $error = preg_replace('/^preg_match\(\): /', '', $php_errormsg);
            return array($path => $error);
        }

        return $result;
    }
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.