Reduce false positives with canary probe

[liquidsec]

This PR significantly changes the behavior of the reflected params module. It now requires the check of a canary, along with the target parameter. This is to prevent situations where ALL parameters are reflected to the page. These scenarios are rarely interesting to an attacker.

This also adds the ability to test reflection in ALL parameter types - not just GET as before. Prior to this, all parameter types were tried as GET requests only.

Tests were added for all new functionality.

This PR meets the goals set by #2097, although the approach ended up being somewhat different.

[codecov]

Codecov Report

Attention: Patch coverage is 99.11504% with 1 line in your changes missing coverage. Please review.

Project coverage is 93%. Comparing base (f40bd13) to head (cba944a).
Report is 11 commits behind head on lightfuzz.

Files with missing lines	Patch %	Lines
bbot/modules/reflected_parameters.py	97%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           lightfuzz   #2168    +/-   ##
==========================================
+ Coverage         93%     93%    +1%     
==========================================
  Files            386     386            
  Lines          31250   31357   +107     
==========================================
+ Hits           28809   28929   +120     
+ Misses          2441    2428    -13     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.