Apply suggestions from code review

Co-authored-by: Asger F <[email protected]>

Author: edoardopirovano

javascript/ql/src/Security/CWE-843/examples/TypeConfusionThroughParameterTampering.js

@@ -4,7 +4,8 @@ var app = require("express")(),
 app.get("/user-files", function(req, res) {
   var file = req.param("file");
   if (file.indexOf("..") !== -1) {
-    // BAD: we forbid relative paths that contain ..
+    // BAD
+    // we forbid relative paths that contain ..
     // as these could leave the public directory
     res.status(400).send("Bad request");
   } else {

javascript/ql/src/Security/CWE-843/examples/TypeConfusionThroughParameterTampering_fixed.js

@@ -4,7 +4,8 @@ var app = require("express")(),
 app.get("/user-files", function(req, res) {
   var file = req.param("file");
   if (typeof file !== 'string' || file.indexOf("..") !== -1) {
-    // BAD: we forbid relative paths that contain ..
+    // GOOD
+    // we forbid relative paths that contain ..
     // as these could leave the public directory
     res.status(400).send("Bad request");
   } else {