False Negative: Weak Algorithm Spec with String replace to be used with Cipher not reported

Thanks for the report @scttmars.

Because this looks very similar to this community post, I have taken the liberty to amend the ticket to cover calls to replace.

Cheers,

Dorian