Handle some more edge cases

vulnerabilities/crlf-injection.yaml

@@ -13,5 +13,5 @@ requests:
     matchers:
       - type: regex
         regex:
-          - "^(?:Set-Cookie\\s?:|;)\\s?crlfinjection=crlfinjection(?:$|;)"
+          - '(?:Set-Cookie:(?:\s*?|.*?;\s*?))(crlfinjection=crlfinjection)'
         part: header

vulnerabilities/open-redirect.yaml

@@ -16,5 +16,5 @@ requests:
     matchers:
       - type: regex
         regex:
-          - '^Location:\s?(?:(?:http|https)://|//|[a-zA-Z0-9\-_]+\.|(?:http|https)://[a-zA-Z0-9\-_]+\.)?evil\.com'
+          - '(?:Location:\s*?)(?:https?://)?(?:[a-zA-Z0-9\-_]*\.)?evil\.com'
         part: header