remove todo comment

Co-authored-by: Asger F <[email protected]>

Author: erik-krogh

javascript/ql/src/semmle/javascript/security/dataflow/InsecureDownloadCustomizations.qll

@@ -112,7 +112,7 @@ module InsecureDownload {
     override DataFlow::Node getDownloadCall() { result = request }
 
     override DataFlow::FlowLabel getALabel() {
-      result instanceof Label::SensitiveInsecureURL // TODO: Also non-sensitive.
+      result instanceof Label::SensitiveInsecureURL
       or
       hasUnsafeExtension(request.getASavePath().getStringValue()) and
       result instanceof Label::InsecureURL