Update java/ql/src/CHANGELOG.md

Author: MathiasVP

java/ql/src/CHANGELOG.md

@@ -9,7 +9,7 @@
 * Query `java/insecure-cookie` now tolerates setting a cookie's secure flag to `request.isSecure()`. This means servlets that intentionally accept unencrypted connections will no longer raise an alert.
 * The query `java/non-https-urls` has been simplified
 and no longer requires its sinks to be `MethodAccess`es.
- * The logic to detect `WebView`s with JavaScript (and optionally file access) enabled in the query `java/android/unsafe-android-webview-fetch` has been improved.
+* The logic to detect `WebView`s with JavaScript (and optionally file access) enabled in the query `java/android/unsafe-android-webview-fetch` has been improved.
 
 ## 0.1.1