* Added new XSS whitelisting feature to allow certain URLs that contain HTML
  https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/184

Bug Fixes:
* Fixed false positive on "style" XSS rule by adding word boundary checks
  https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/186
* Fixed false positive on "xor" SQLi rule by adding word boundary checks
  https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/185