Re2 is an OCaml module implemented by Google with an explicit goal of being able to handle regular expressions from untrusted users without risk.