Add NoUnsanitizedJSPExpression rule