Added matchAll test which is not marked as vulnurability by CodeQL

javascript/ql/test/query-tests/Security/CWE-117/logInjectionBad.js

@@ -116,4 +116,10 @@ const server4 = http.createServer((req, res) => {
         });
         server.start();
     }
-});
+});
+
+const serverMatchAll = http.createServer((req, res) => {
+    let username = url.parse(req.url, true).query.username;
+    let otherStr = username.matchAll(/.*/g)[0]; // BAD - this is suppose to be cought by Taint Tracking, works for match but not matchAll
+    console.log(otherStr);
+});