Update RegExp handling and add test case

Co-authored-by: erik-krogh <[email protected]>

Author: Napalys

javascript/ql/lib/semmle/javascript/security/dataflow/CleartextLoggingCustomizations.qll

@@ -40,7 +40,7 @@ module CleartextLogging {
       exists(this.getRawReplacement().getStringValue()) and
       exists(DataFlow::RegExpCreationNode regexpObj |
         this.(StringReplaceCall).getRegExp() = regexpObj and
-        regexpObj.getRoot() = any(RegExpDot term)
+        regexpObj.getRoot() = any(RegExpDot term).getRootTerm()
       )
     }
   }

javascript/ql/test/query-tests/Security/CWE-312/passwords.js

@@ -181,4 +181,5 @@ const debug = require('debug')('test');
 	console.log(password.replace(new RegExp(".", "g"), "*")); // OK
 	console.log(password.replace(new RegExp("."), "*")); // NOT OK
 	console.log(password.replace(new RegExp(".", unknownFlags()), "*")); // OK -- Most likely not a problem.
+    console.log(password.replace(new RegExp("pre_._suf", "g"), "*")); // OK
 })();