Comment by jimrandomh

Practical upshot: do not feed untrusted regexes into boost::regex.