experimental/xpath-injection/XpathInjection.ql