Add method whitelisting for SQL Injection and Symbol DoS false-positives

I wasn't sure what was the best way to test this change.  If you have a suggestion, I can look into implementing it.