chore: use package to check for regex vulnerability

Author: Deepak-Kharah

package-lock.json

@@ -87,8 +87,9 @@
         "deepsignal": "^1.5.0",
         "goober": "^2.1.14",
         "lodash-es": "^4.17.21",
-        "preact": "^10.19.5",
         "mustache": "^4.2.0",
+        "preact": "^10.19.5",
+        "recheck": "^4.4.5",
         "uuid": "^8.3.2"
     },
     "optionalDependencies": {

package.json

@@ -2,6 +2,8 @@ import { VisualBuilder } from "..";
 import { visualBuilderStyles } from "../visualBuilder.style";
 import visualBuilderPostMessage from "../utils/visualBuilderPostMessage";
 import { VisualBuilderPostMessageEvents } from "../utils/types/postMessage.types";
+import { checkSync } from "recheck";
+
 
 interface VariantFieldsEvent {
     data: {
@@ -37,8 +39,11 @@ function addVariantFieldClass(
         const dataCslp = element.getAttribute("data-cslp");
         if (!dataCslp) return;
 
-        const escapedVariantUid = variant_uid.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-        if (new RegExp(escapedVariantUid).test(dataCslp)) {
+        const regexStatus = checkSync(variant_uid, "g");
+        if (regexStatus.status !== "safe") {
+            return;
+        }
+        if (new RegExp(variant_uid).test(dataCslp)) {
             highlightVariantFields &&
                 element.classList.add(
                     visualBuilderStyles()["visual-builder__variant-field"]