queries: - exclude: java/insecure-cookie