JavaScript: Flow taint though Fetch API objects: Request, Response, Headers #23084

Description of the issue

The JavaScript Fetch API added Request, Response, and Headers objects that are highly available and standardized as global objects.

Although these were intended for use with fetch(), their global and general purpose nature means that many JavaScript frameworks have adopted these objects for their native server-side handling methods. These types should be modeled as part of CodeQL, so that taint can flow through when used separate from fetch().