Merge pull request #6776 from yoff/python/model-asyncpg

Python: Model `asyncpg`

python/ql/lib/semmle/python/security/dataflow/SqlInjectionCustomizations.qll

@@ -42,6 +42,13 @@ module SqlInjection {
    */
   class RemoteFlowSourceAsSource extends Source, RemoteFlowSource { }
 
+  /**
+   * A SQL statement of a SQL construction, considered as a flow sink.
+   */
+  class SqlConstructionAsSink extends Sink {
+    SqlConstructionAsSink() { this = any(SqlConstruction c).getSql() }
+  }
+
   /**
    * A SQL statement of a SQL execution, considered as a flow sink.
    */
@@ -49,13 +56,6 @@ module SqlInjection {
     SqlExecutionAsSink() { this = any(SqlExecution e).getSql() }
   }
 
-  /**
-   * The text argument of a SQLAlchemy TextClause construction, considered as a flow sink.
-   */
-  class TextArgAsSink extends Sink {
-    TextArgAsSink() { this = any(SqlAlchemy::TextClause::TextClauseConstruction tcc).getTextArg() }
-  }
-
   /**
    * A comparison with a constant string, considered as a sanitizer-guard.
    */