add bad-transferfrom-access-control rule

[morsiiik]

No description provided.

[Raz0r]

Please check the following false positives:

1. When a token overrides transferFrom and calls super: super.transferFrom(_from, _to, _value) https://arbiscan.io/address/0x00207cdc7b29c9ed857dace7311c713a054185dd

2. Second argument to is not controlled: transferFrom(_fundingAccount, address(this), _amount) https://arbiscan.io/address/0x005906f3bC2d756CdF9e49930BCa4bfB76a80246#code

3. There is some access control validation, e.g. onlyOwner, you can try to use pattern-sanitizers, example (https://arbiscan.io/address/0x01e9B35785eF3f7Ef2677c371442976bd550f320):

 function pluginTransfer(address _token, address _account, address _receiver, uint256 _amount) external override {
        _validatePlugin(_account);
        IERC20(_token).safeTransferFrom(_account, _receiver, _amount);
 }