Regexp Security Cheatsheet: “weak places” in regular expressions of Web Application Firewalls (WAFs)