More clear description of the JsInclude regex. I was before not clear that this wasa attack possibility.