ruby: CSRFProtectionDisabled.qhelp fixes

Co-authored-by: Harry Maclean <[email protected]>

Author: alexrford

ruby/ql/src/queries/security/cwe-352/CSRFProtectionDisabled.qhelp

@@ -6,7 +6,7 @@
   <overview>
     <p>
       Cross-site request forgery (CSRF) is a type of vulnerability in which an
-      attacker  is able to force a user carry out an action that the user did
+      attacker is able to force a user carry out an action that the user did
       not intend. This may allow the attacker to perform actions on behalf of
       the targeted user.
     </p>
@@ -40,7 +40,7 @@
 
   <example>
     <p>
-      The following example shows a case where forgery protection is disabled by
+      The following example shows a case where CSRF protection is disabled by
       skipping token verification.
     </p>