https://hackerone.com/reports/1339898https://github.com/github/securitylab/issues/414https://github.com/github/codeql/pull/6393/files
