Security/CWE-116/UnsafeHtmlExpansion.ql