First draft of the XSS detector.
Identify tainted source HttpServletRequest.getAttribute and HttpServletRequest.getParamter.
Identify use of tainted local pass to JSP output printer.
Multiple test cases added.
JspXssDetector now support PrintWriter "sink".
It will find potential XSS in custom servlet.
Merge branch 'master' of github.com:h3xstream/find-sec-bugs

Conflicts:
	findbugs-test-util/src/test/java/com/h3xstream/findbugs/test/service/ClassFileLocator.java
	plugin/src/test/webapp/xss_1_direct_use.jsp