Fix FormDataConsumer to avoid ReDoS in source detection

[WiXSL]

Summary

• simplify the array-source detection logic in FormDataConsumer
• replace the previous regex shape with a safe anchored suffix check

Why

GitHub code scanning reports alert #44 (Polynomial regular expression used on uncontrolled data) on FormDataConsumer.

The previous regex used a greedy repeated token before the numeric suffix. This change keeps the same intent while avoiding the backtracking pattern that CodeQL flagged.

Testing

• yarn test-unit --runTestsByPath packages/ra-core/src/form/FormDataConsumer.spec.tsx

[Copilot]

Pull request overview

This PR updates FormDataConsumer’s “array item source” detection to avoid a potentially unsafe regular expression pattern flagged by CodeQL, while preserving the existing behavior used to infer scopedFormData when inside iterator-like components.

Changes:

• Replace /.+\.\d+$/ matching via exec() with a safer anchored suffix check (/\.\d+$/) via test().
• Introduce a small helper (getArraySource) to centralize and clarify the detection logic.
• Continue using the detected array-item source path to compute scopedFormData via lodash/get.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.