An option to whitelist certain words for the javascript_lang_observable_timing rule

[lukaszjaskowski]

The javascript_lang_observable_timing rule reports any two values comparison in case one of two values matches the following regex: (?i)\A(password)|hash|(api|auth)?.?(token|secret)\z.

This rule reports many false positives in case there is a special word used in the given codebase that also matches this regex. A good example of that may be a common hashtag word. To reduce the number of false positives, it would be convenient to add an option to whitelist certain words for this rule.

[akwodkiewicz]

Alternatively allow to provide a custom regex