Add additional security rules

[sspendol]

Need to add a complete set of security rules that is at leas the same as the existing set. Ideally, each rule will be verified & tuned to cut down on the large amount of false positives.

[sspendol]

Additional rules needed:

• deprecated regions (done)
• additional XSS checks (done)

[sspendol]

Could use some help with the Regular Expressions for:

• htp.p* with no sys prefix
• sys.htp.p that is not wrapped in apex_escape.