Spider blacklist is implemented using words, should be using paths

[MarioVilas]

Or at least give the option to have the two mechanisms. Looking for words is useful in some scenarios (avoid logout links for example) but it should be "smarter" and look for whole words, to avoid false positives.