experimental/Security/CWE-347/decodeJwtWithoutVerification.ql