Ruby: limit rb/sensitive-get-query to data from query params

ruby/ql/lib/codeql/ruby/security/SensitiveGetQueryCustomizations.qll

@@ -32,7 +32,8 @@ module SensitiveGetQuery {
 
     RequestInputAccessSource() {
       handler = this.asExpr().getExpr().getEnclosingMethod() and
-      handler.getAnHttpMethod() = "get"
+      handler.getAnHttpMethod() = "get" and
+      this.getSourceType().matches(["%params%", "%parameters%"])
     }
 
     override Http::Server::RequestHandler getHandler() { result = handler }