Move UrlRedirectSink into importable library

- The `UrlRedirect` class is renamed to `ServletUrlRedirect`.
- Abstract class `UrlRedirectSink` is defined that can be imported and
used to customise CWE-601 via Customizations.qll

Author: rvermeulen

…src/Security/CWE/CWE-601/UrlRedirect.qll …urity/CWE/CWE-601/ServletUrlRedirect.qlljava/ql/src/Security/CWE/CWE-601/UrlRedirect.qll renamed to java/ql/src/Security/CWE/CWE-601/ServletUrlRedirect.qll java/ql/src/Security/CWE/CWE-601/UrlRedirect.qll renamed to java/ql/src/Security/CWE/CWE-601/ServletUrlRedirect.qll

@@ -1,12 +1,13 @@
 import java
 import semmle.code.java.frameworks.Servlets
 import semmle.code.java.dataflow.DataFlow
+import semmle.code.java.security.UrlRedirect
 
 /**
- * A URL redirection sink.
+ * A Servlet URL redirection sink.
  */
-class UrlRedirectSink extends DataFlow::ExprNode {
-  UrlRedirectSink() {
+class ServletUrlRedirectSink extends UrlRedirectSink {
+  ServletUrlRedirectSink() {
     exists(MethodAccess ma |
       ma.getMethod() instanceof HttpServletResponseSendRedirectMethod and
       this.asExpr() = ma.getArgument(0)

java/ql/src/Security/CWE/CWE-601/UrlRedirect.ql

@@ -12,7 +12,7 @@
 
 import java
 import semmle.code.java.dataflow.FlowSources
-import UrlRedirect
+import ServletUrlRedirect
 import DataFlow::PathGraph
 
 class UrlRedirectConfig extends TaintTracking::Configuration {

java/ql/src/Security/CWE/CWE-601/UrlRedirectLocal.ql

@@ -12,7 +12,7 @@
 
 import java
 import semmle.code.java.dataflow.FlowSources
-import UrlRedirect
+import ServletUrlRedirect
 import DataFlow::PathGraph
 
 class UrlRedirectLocalConfig extends TaintTracking::Configuration {

java/ql/src/semmle/code/java/security/UrlRedirect.qll

@@ -0,0 +1,5 @@
+import java
+import semmle.code.java.dataflow.DataFlow
+
+/** A URL redirection sink */
+abstract class UrlRedirectSink extends DataFlow::ExprNode { }