New sink category: Regex Injection

[nyc2]

This is just an idea for a new sink category...

Regex injections can lead to information leakage or denial of service.

[bergerbd]

That's a good idea. There are several other categories, such XPath injection. At the moment, I don't know if I have to change the source for additional categories.

[bergerbd]

As far as I can see the source looks good. We can start to collect new sink descriptions. I remember that I've seen some kind of server-side Javascript injection.