Correct me if I'm wrong, but the regular expression looks like it will take any 2 or 3 letter extension, as long as it contains only alphas. I'm not aware of any 2 letter extensions. I thought there were only these:
.com, .edu, .gov, .mil, .net, .org
This does not, of course, include the upcoming new ones like .biz, .name, etc.
That being the case, what is to stop someone from using an invalid extension, e.g, ".xyz" or some such? Wouldn't it still pass muster for the regular expression given?
Just curious.