codeql/java/ql/test/query-tests/security/CWE-295/AndroidMissingCertificatePinning/Test3/Test.java

import okhttp3.OkHttpClient;
import okhttp3.CertificatePinner;
import okhttp3.Request;

class Test{
    void test1() throws Exception {
    CertificatePinner certificatePinner = new CertificatePinner.Builder()
         .add("good.example.com", "sha256/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=")
         .build();
     OkHttpClient client = new OkHttpClient.Builder()
         .certificatePinner(certificatePinner)
         .build();

     client.newCall(new Request.Builder().url("https://good.example.com").build()).execute();
     client.newCall(new Request.Builder().url("https://bad.example.com").build()).execute(); // $hasUntrustedResult
    }
}