Hello @Gyucheon Heo , there is not documented limit. RegularExpression
values with over 10,000 characters work however you might consider moving the whitelisting to a REST API Validation Technical Profile for added maintainability and flexibility.
Let us know if this answer was helpful to you or if you need additional assistance. If it was helpful, please remember to accept it so that others in the community with similar questions can more easily find a solution.