feat: javascript http insecure rule

[vjerci]

Description

This pr adds rule for detecting communications with http insecure urls
It also cleans up a little bit other javascript rules.

patterns it looks for:

  - pattern: |
      $<LIBRARY>.$<METHOD>($<INSECURE_URL>)
    filters:
      - variable: INSECURE_URL
        detection: insecure_url
      - variable: LIBRARY
        values:
          - axios
          - http
      - variable: METHOD
        values:
          - get
          - post
          - patch
          - delete
  - pattern: |
      fetch($<INSECURE_URL>)
    filters:
      - variable: INSECURE_URL
        detection: insecure_url
  - pattern: |
      $<REQUEST>.open($<_>, $<INSECURE_URL>);
    filters:
      - variable: INSECURE_URL
        detection: insecure_url
      - variable: REQUEST
        values:
          - req
          - request
          - xhttp

Related

• Checks a checkbox Write JS Rules #504

Checklist

• I've added test coverage that shows my fix or feature works as expected.
• I've updated or added documentation if required.
• I've included usage information in the description if CLI behavior was updated or added.
• PR title follows Conventional Commits format