CVE-2022-1929: Regular expression denial of service in devcert

The vulnerability stemmed from the VALID_DOMAIN regex pattern used in domain validation. The commit diff shows: 1) Removal of VALID_DOMAIN from constants.ts 2) Replacement of VALID_DOMAIN.test() with isValidDomain in certificateFor function. The CWE-1333 classification confirms this was an inefficient regex issue. The certificateFor function was the entry point for attacker-controlled input validation using this vulnerable regex, making it the clear vulnerable function. The high confidence comes from direct evidence of regex replacement in the patch and CVE's explicit mention of certificateFor as the attack vector.