Security/CWE-643/XpathInjection.ql