Security/CWE-020/IncompleteUrlSubstringSanitization.ql