Update core rules

[kkadosh]

Hello,

Here is an update of some core rules such as:

• Adding more sql keyword that are not prone to FP
• Adding wrappers (zip://, expect:// , input)
• Adding directory traversal bypass (cf. this presentation)
• Adding .jsp extension for file upload

TODO: Test \b(select|union|update|delete|insert|table|from|ascii|hex|unhex|drop)\b from #337