session-usage-regex.txt

[\s#]+session[.\[]+[^\s]
better from choop: \bsession[.\[][^\s]+

tests:

dontmatchsession.x
session.foo
#session.foo
session["foo"]
session[foo]
session.#something#
session. dont match
<cfset dontmatchsession.x
<cfset session.foo
<cfset #session.foo
<cfset session["foo"]
<cfset session[foo]
<cfset session.#something#
<cfset session. dont match