More tests would be nice, maybe make sure it doesn't warn on stuff that isn't user input, still works if there is more to the regex (like `/something#{params[x:]}something/`), etc.