Added middleware test

javascript/ql/test/query-tests/Security/CWE-918/Request/middleware.ts

@@ -0,0 +1,12 @@
+import { NextRequest, NextResponse } from 'next/server';
+
+export async function middleware(req: NextRequest) {
+    const target = req.nextUrl // $ MISSING : Source[js/request-forgery]
+    if (target) {
+      const res = await fetch(target) // $ MISSING: Alert[js/request-forgery] Sink[js/request-forgery]
+      const data = await res.text()
+      return new NextResponse(data)
+    }
+    return NextResponse.next()
+}
+