Decision: Insert regex.escape(siteName) before using it in any regex pattern to prevent a Regular Expression Denial of Service (ReDoS) vulnerability.
I identified places where siteName was concatenated into regex patterns, applied regex.escape at the input handling point, and tested the affected regexes with malicious payloads to confirm that backtracking is bounded.