Move QueryInjectionSink into importable library

This enables defining of new sinks to customise the CWE-089 queries.

Author: rvermeulen

java/ql/src/Security/CWE/CWE-089/SqlInjectionLib.qll

@@ -2,15 +2,13 @@
 
 import semmle.code.java.Expr
 import semmle.code.java.dataflow.FlowSources
+import semmle.code.java.security.QueryInjection
 import semmle.code.java.frameworks.android.SQLite
 import semmle.code.java.frameworks.javaee.Persistence
 import semmle.code.java.frameworks.SpringJdbc
 import semmle.code.java.frameworks.MyBatis
 import semmle.code.java.frameworks.Hibernate
 
-/** A sink for database query language injection vulnerabilities. */
-abstract class QueryInjectionSink extends DataFlow::ExprNode { }
-
 /** A sink for SQL injection vulnerabilities. */
 class SqlInjectionSink extends QueryInjectionSink {
   SqlInjectionSink() {

java/ql/src/semmle/code/java/security/QueryInjection.qll

@@ -0,0 +1,5 @@
+import java
+import semmle.code.java.dataflow.DataFlow
+
+/** A sink for database query language injection vulnerabilities. */
+abstract class QueryInjectionSink extends DataFlow::ExprNode { }