Add specs for String#{[],slice} with untrusted Regexp
Add specs for Symbol#{[],slice} with untrusted Regexp
Fix {String,Symbol}#{[],slice} with untrusted Regexp

Symbol#{[],slice} with [Regexp, capture_index] is
depending String#subpattern too.