Replace regex

javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll

@@ -112,7 +112,7 @@ module InsecureCookie {
       // A cookie is insecure if the 'secure' flag is not specified in the cookie definition.
       not exists(string s |
         getCookieOptionsArgument().mayHaveStringValue(s) and
-        s.matches("%; secure%")
+        s.regexpMatch("(.*;)?\\s*secure.*")
       )
     }
   }