Switch to multiline matching to avoid false positives

vulnerabilities/crlf-injection.yaml

@@ -13,5 +13,5 @@ requests:
     matchers:
       - type: regex
         regex:
-          - '(?:Set-Cookie\s*?:(?:\s*?|.*?;\s*?))(crlfinjection=crlfinjection)'
+          - '(?m)^(?:Set-Cookie\s*?:(?:\s*?|.*?;\s*?))(crlfinjection=crlfinjection)'
         part: header

vulnerabilities/open-redirect.yaml

@@ -16,5 +16,5 @@ requests:
     matchers:
       - type: regex
         regex:
-          - '(?:Location\s*?:\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\-_]*\.)?evil\.com'
+          - '(?m)^(?:Location\s*?:\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\-_]*\.)?evil\.com'
         part: header