experimental/Security/CWE/CWE-552/UnsafeUrlForward.ql