Security/BadPractice/IncompleteUrlSanitizer/IncompleteUrlSubstringSanitization.ql