experimental/Security/CWE-1004/CookieWithoutHttpOnly.ql