move the MaD sql-injection sink to SqlInjectionCustomizations.qll

Author: erik-krogh

python/ql/lib/semmle/python/Concepts.qll

@@ -372,14 +372,6 @@ module SqlExecution {
     /** Gets the argument that specifies the SQL statements to be executed. */
     abstract DataFlow::Node getSql();
   }
-
-  private import semmle.python.frameworks.data.ModelsAsData
-
-  private class DataAsSqlExecution extends Range {
-    DataAsSqlExecution() { this = ModelOutput::getASinkNode("sql-injection").getARhs() }
-
-    override DataFlow::Node getSql() { result = this }
-  }
 }
 
 /**

python/ql/lib/semmle/python/security/dataflow/SqlInjectionCustomizations.qll

@@ -60,4 +60,11 @@ module SqlInjection {
    * A comparison with a constant string, considered as a sanitizer-guard.
    */
   class StringConstCompareAsSanitizerGuard extends SanitizerGuard, StringConstCompare { }
+
+  private import semmle.python.frameworks.data.ModelsAsData
+
+  /** A sink for sql-injection from model data. */
+  private class DataAsSqlSink extends Sink {
+    DataAsSqlSink() { this = ModelOutput::getASinkNode("sql-injection").getARhs() }
+  }
 }