Add UrlRedirectLocalQuery.qll

Author: egregius313

java/ql/lib/semmle/code/java/security/UrlRedirectLocalQuery.qll

@@ -0,0 +1,19 @@
+/** Provides a taint-tracking configuration to reason about URL redirection from local sources. */
+
+import java
+import semmle.code.java.dataflow.FlowSources
+import semmle.code.java.security.UrlRedirect
+
+/**
+ * A taint-tracking configuration to reason about URL redirection from local sources.
+ */
+module UrlRedirectLocalConfig implements DataFlow::ConfigSig {
+  predicate isSource(DataFlow::Node source) { source instanceof LocalUserInput }
+
+  predicate isSink(DataFlow::Node sink) { sink instanceof UrlRedirectSink }
+}
+
+/**
+ * Taint-tracking flow for URL redirection from local sources.
+ */
+module UrlRedirectLocalFlow = TaintTracking::Global<UrlRedirectLocalConfig>;

java/ql/src/Security/CWE/CWE-601/UrlRedirectLocal.ql

@@ -12,17 +12,7 @@
  */
 
 import java
-import semmle.code.java.dataflow.FlowSources
-import semmle.code.java.security.UrlRedirect
-
-module UrlRedirectLocalConfig implements DataFlow::ConfigSig {
-  predicate isSource(DataFlow::Node source) { source instanceof LocalUserInput }
-
-  predicate isSink(DataFlow::Node sink) { sink instanceof UrlRedirectSink }
-}
-
-module UrlRedirectLocalFlow = TaintTracking::Global<UrlRedirectLocalConfig>;
-
+import semmle.code.java.security.UrlRedirectLocalQuery
 import UrlRedirectLocalFlow::PathGraph
 
 from UrlRedirectLocalFlow::PathNode source, UrlRedirectLocalFlow::PathNode sink