XSRF test

Author: mbaluda

javascript/frameworks/ui5/test/queries/RequestForgery/CSRF.expected

@@ -0,0 +1,4 @@
+edges
+nodes
+subpaths
+#select

javascript/frameworks/ui5/test/queries/RequestForgery/CSRF.qlref

@@ -0,0 +1 @@
+Security/CWE-918/ClientSideRequestForgery.ql

javascript/frameworks/ui5/test/queries/RequestForgery/SSRF.expected

@@ -0,0 +1,4 @@
+edges
+nodes
+subpaths
+#select

javascript/frameworks/ui5/test/queries/RequestForgery/SSRF.qlref

@@ -0,0 +1 @@
+Security/CWE-918/RequestForgery.ql

javascript/frameworks/ui5/test/queries/RequestForgery/test.js

@@ -0,0 +1,6 @@
+import request from 'request';
+$(document).ready(function () {
+    var request = new XMLHttpRequest();
+    var url = jQuery.sap.GetUriParameters().get("url");
+    request.open("GET", url, false);
+});