Move the sources back the .ql files

Otherwise they would both apply at the same time, making both versions of the query identical.

Author: atorralba

java/ql/src/experimental/Security/CWE/CWE-078/CommandInjectionRuntimeExec.ql

@@ -14,6 +14,8 @@
 import CommandInjectionRuntimeExec
 import ExecUserFlow::PathGraph
 
+class RemoteSource extends Source instanceof RemoteFlowSource { }
+
 from
   ExecUserFlow::PathNode source, ExecUserFlow::PathNode sink, DataFlow::Node sourceCmd,
   DataFlow::Node sinkCmd

java/ql/src/experimental/Security/CWE/CWE-078/CommandInjectionRuntimeExec.qll

@@ -30,10 +30,6 @@ module ExecCmdFlow = TaintTracking::Global<ExecCmdFlowConfig>;
 
 abstract class Source extends DataFlow::Node { }
 
-class RemoteSource extends Source instanceof RemoteFlowSource { }
-
-class LocalSource extends Source instanceof LocalUserInput { }
-
 module ExecUserFlowConfig implements DataFlow::ConfigSig {
   predicate isSource(DataFlow::Node source) { source instanceof Source }
 

java/ql/src/experimental/Security/CWE/CWE-078/CommandInjectionRuntimeExecLocal.ql

@@ -15,6 +15,8 @@
 import CommandInjectionRuntimeExec
 import ExecUserFlow::PathGraph
 
+class LocalSource extends Source instanceof LocalUserInput { }
+
 from
   ExecUserFlow::PathNode source, ExecUserFlow::PathNode sink, DataFlow::Node sourceCmd,
   DataFlow::Node sinkCmd