Added a query for ignored hostname verification

- Added IgnoredHostnameVerification.ql
- Added a qhelp file with examples
- Added tests

java/ql/test/experimental/query-tests/security/CWE-297/IgnoredHostnameVerification.java

@@ -1,6 +1,7 @@
 import java.io.IOException;
 import javax.net.ssl.HostnameVerifier;
 import javax.net.ssl.SSLException;
+import javax.net.ssl.SSLSession;
 import javax.net.ssl.SSLSocket;
 import javax.net.ssl.SSLSocketFactory;
 
@@ -89,4 +90,19 @@ public class IgnoredHostnameVerification {
     throw new SSLException("Oops! Hostname verification failed!");
   }
 
-}
+  public static class HostnameVerifierWrapper implements HostnameVerifier {
+
+    private final HostnameVerifier verifier;
+
+    public HostnameVerifierWrapper(HostnameVerifier verifier) {
+        this.verifier = verifier;
+    }
+
+    @Override
+    public boolean verify(String hostname, SSLSession session) {
+        return verifier.verify(hostname, session); // GOOD: wrapped calls should not be reported
+    }
+
+  }
+
+}