[xss] dont alert on template rendering without explicit content-type
add .po and .pyc to whitelisted files
fine-tune http_variable_used rule
fix secret rule
fine-tune secret rule
make cpp calls rule case-sensitive
whitelist scripts/ directory