Passive scanner rules (beta) version 20

Changed

• Tweak Information Disclosure - Suspicious Comments scanner to ignore whitespace before/after suspicious comments terms in the suspicious-comments.txt config file.
• Only scan for Servlet Parameter Pollution at LOW threshold (part of Issue 4454).
• Username IDOR scan rule now supports use of the Custom Payload addon.