JS: Added test case which is not flagged but should be abusing new RegExp with global flag

Author: Napalys

javascript/ql/test/query-tests/Security/CWE-116/IncompleteSanitization/tst.js

@@ -327,4 +327,8 @@ function incompleteComplexSanitizers() {
 		if (str === "\"")
 			return """;
 	}) + '"';
-}
+}
+
+function typicalBadHtmlSanitizers(s) {
+	s().replace(new RegExp("[<>]", "g"),''); // NOT OK -- should be not okay, but is not flagged
+}