Add UrlRedirectQuery.qll

Author: egregius313

java/ql/lib/semmle/code/java/security/UrlRedirectQuery.qll

@@ -0,0 +1,19 @@
+/** Provides a taint-tracking configuration for reasoning about URL redirections. */
+
+import java
+import semmle.code.java.dataflow.FlowSources
+import semmle.code.java.security.UrlRedirect
+
+/**
+ * A taint-tracking configuration for reasoning about URL redirections.
+ */
+module UrlRedirectConfig implements DataFlow::ConfigSig {
+  predicate isSource(DataFlow::Node source) { source instanceof RemoteFlowSource }
+
+  predicate isSink(DataFlow::Node sink) { sink instanceof UrlRedirectSink }
+}
+
+/**
+ * Taint-tracking flow for URL redirections.
+ */
+module UrlRedirectFlow = TaintTracking::Global<UrlRedirectConfig>;

java/ql/src/Security/CWE/CWE-601/UrlRedirect.ql

@@ -12,17 +12,7 @@
  */
 
 import java
-import semmle.code.java.dataflow.FlowSources
-import semmle.code.java.security.UrlRedirect
-
-module UrlRedirectConfig implements DataFlow::ConfigSig {
-  predicate isSource(DataFlow::Node source) { source instanceof RemoteFlowSource }
-
-  predicate isSink(DataFlow::Node sink) { sink instanceof UrlRedirectSink }
-}
-
-module UrlRedirectFlow = TaintTracking::Global<UrlRedirectConfig>;
-
+import semmle.code.java.security.UrlRedirectQuery
 import UrlRedirectFlow::PathGraph
 
 from UrlRedirectFlow::PathNode source, UrlRedirectFlow::PathNode sink