experimental/Security/CWE/CWE-1004/SensitiveCookieNotHttpOnly.ql