Consider Oj.load a sink for unsafe deserialization
string constantQualifiedName(ConstantWriteAccess)
string ConstantWriteAccess#getQualifiedName
codeql/suite-helpers