Safe Connector Origin Bypass

Unescaped regex /app.safe.global$/ - dot matches any char - app0safe.global matches.