queries/security/cwe-352/CSRFProtectionNotEnabled.ql