experimental/CWE-918/RequestForgery.ql