https://raz0r.name/articles/using-codeql-to-detect-client-side-vulnerabilities-in-web-applications/