[Feature Request] detect `if-evil`

https://www.nginx.com/resources/wiki/start/topics/depth/ifisevil/