feat: exclude hugo framework safeURL, safeHTML keyword from squirrell…

…y true positives

Signed-off-by: sebastien.heurtematte <[email protected]>

njsscan/rules/pattern_matcher/template_rules.yaml

@@ -69,7 +69,7 @@
   message: The Squirrelly.js template has an unescaped variable. Untrusted user input
     passed to this variable results in Cross Site Scripting (XSS)
   type: Regex
-  pattern: '{{.+\|.*safe.*}}'
+  pattern: '{{(?!.*(?:safeURL|safeHTML|safeCSS|safeJS|safeJSStr|safeHTMLAttr)).*\|.*safe.*}}'
   severity: ERROR
   input_case: exact
   metadata: