Swift: Make default implementations private.

Author: geoffw0

swift/ql/lib/codeql/swift/security/SqlInjectionExtensions.qll

@@ -28,7 +28,7 @@ class SqlInjectionAdditionalTaintStep extends Unit {
 /**
  * A default SQL injection sink for the sqlite3 C API.
  */
-class CApiDefaultSqlInjectionSink extends SqlInjectionSink {
+private class CApiDefaultSqlInjectionSink extends SqlInjectionSink {
   CApiDefaultSqlInjectionSink() {
     // `sqlite3_exec` and variants of `sqlite3_prepare`.
     exists(CallExpr call |
@@ -48,7 +48,7 @@ class CApiDefaultSqlInjectionSink extends SqlInjectionSink {
 /**
  * A default SQL injection sink for the `SQLite.swift` library.
  */
-class SQLiteSwiftDefaultSqlInjectionSink extends SqlInjectionSink {
+private class SQLiteSwiftDefaultSqlInjectionSink extends SqlInjectionSink {
   SQLiteSwiftDefaultSqlInjectionSink() {
     // Variants of `Connection.execute`, `connection.prepare` and `connection.scalar`.
     exists(CallExpr call |
@@ -70,7 +70,7 @@ class SQLiteSwiftDefaultSqlInjectionSink extends SqlInjectionSink {
 /**
  * A default SQL injection sink for the GRDB library.
  */
-class GrdbDefaultSqlInjectionSink extends SqlInjectionSink {
+private class GrdbDefaultSqlInjectionSink extends SqlInjectionSink {
   GrdbDefaultSqlInjectionSink() {
     exists(CallExpr call, MethodDecl method |
       call.getStaticTarget() = method and

swift/ql/lib/codeql/swift/security/UnsafeJsEvalExtensions.qll

@@ -28,7 +28,7 @@ class UnsafeJsEvalAdditionalTaintStep extends Unit {
 /**
  * A default SQL injection sink for the `WKWebView` interface.
  */
-class WKWebViewDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
+private class WKWebViewDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
   WKWebViewDefaultUnsafeJsEvalSink() {
     any(CallExpr ce |
       ce.getStaticTarget()
@@ -48,7 +48,7 @@ class WKWebViewDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
 /**
  * A default SQL injection sink for the `WKUserContentController` interface.
  */
-class WKUserContentControllerDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
+private class WKUserContentControllerDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
   WKUserContentControllerDefaultUnsafeJsEvalSink() {
     any(CallExpr ce |
       ce.getStaticTarget()
@@ -61,7 +61,7 @@ class WKUserContentControllerDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
 /**
  * A default SQL injection sink for the `UIWebView` and `WebView` interfaces.
  */
-class UIWebViewDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
+private class UIWebViewDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
   UIWebViewDefaultUnsafeJsEvalSink() {
     any(CallExpr ce |
       ce.getStaticTarget()
@@ -74,7 +74,7 @@ class UIWebViewDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
 /**
  * A default SQL injection sink for the `JSContext` interface.
  */
-class JSContextDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
+private class JSContextDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
   JSContextDefaultUnsafeJsEvalSink() {
     any(CallExpr ce |
       ce.getStaticTarget()
@@ -87,7 +87,7 @@ class JSContextDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
 /**
  * A default SQL injection sink for the `JSEvaluateScript` function.
  */
-class JSEvaluateScriptDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
+private class JSEvaluateScriptDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
   JSEvaluateScriptDefaultUnsafeJsEvalSink() {
     any(CallExpr ce |
       ce.getStaticTarget().(FreeFunctionDecl).hasName("JSEvaluateScript(_:_:_:_:_:_:)")
@@ -98,7 +98,7 @@ class JSEvaluateScriptDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
 /**
  * A default SQL injection sanitrizer.
  */
-class DefaultUnsafeJsEvalAdditionalTaintStep extends UnsafeJsEvalAdditionalTaintStep {
+private class DefaultUnsafeJsEvalAdditionalTaintStep extends UnsafeJsEvalAdditionalTaintStep {
   override predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
     exists(Argument arg |
       arg =

swift/ql/lib/codeql/swift/security/UnsafeWebViewFetchExtensions.qll

@@ -34,7 +34,7 @@ class UnsafeWebViewFetchAdditionalTaintStep extends Unit {
  * A default uncontrolled format string sink, such as certain arguments
  * to `UIWebView.loadHTMLString`.
  */
-class UIKitWebKitWebViewFetchSink extends UnsafeWebViewFetchSink {
+private class UIKitWebKitWebViewFetchSink extends UnsafeWebViewFetchSink {
   Expr baseUrl;
 
   UIKitWebKitWebViewFetchSink() {