I don't see the point of using a regexp to solve this type of problem.

Ordinarily I'd agree with you, but the OP clearly stated:

I'm using the RE to untaint a number from a CGI form.