Added test case with inheretence.

Author: Napalys

javascript/ql/test/query-tests/Security/CWE-918/apollo.serverSide.ts

@@ -11,4 +11,17 @@ function createApolloServer(typeDefs) {
         },
       };
     const server = new ApolloServer({typeDefs, resolvers});
+
+    const resolvers2 = {
+      Mutation: {
+        downloadFiles: async (_, { files }) => { // $ MISSING: Source[js/request-forgery]
+          files.forEach((file) => { get(file.url, (res) => {}); }); // $ MISSING: Alert[js/request-forgery] Sink[js/request-forgery]
+          return true;
+        },
+      },
+    };
+    
+    class CustomApollo extends ApolloServer {}
+
+    const srv = new CustomApollo({typeDefs, resolvers: resolvers2});
 }