Regex matching is only configurable in service policies and routes based on header/query parameter values. Only exact, case-sensitive header names can be used. You cannot drop all requests with a pattern of headers like:

"badHeader: aaa"

"dfghbadHeaderasdjasd: bbb"

"bAdHeAdeR: ccc"

I should be able to match on any header that matches a regex such as /(?i).*badheader.*/

Or, at a minimum, let me specify "contains the string badheader in the header name and is case insensitive".