add link to The Useless Use of Cat Award

Author: erik-krogh

javascript/ql/src/Security/CWE-078/UselessUseOfCat.qhelp

@@ -36,10 +36,9 @@ and if the input is user-controlled, a command injection attack can happen.</p>
 </example>
 <references>
 
-<li>
-OWASP: <a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.
-Node.js: <a href="https://nodejs.org/api/fs.html">File System API</a>. 
-</li>
+<li>OWASP: <a href="https://www.owasp.org/index.php/Command_Injection">Command Injection</a>.</li>
+<li>Node.js: <a href="https://nodejs.org/api/fs.html">File System API</a>.</li>
+<li><a href="http://porkmail.org/era/unix/award.html#cat">The Useless Use of Cat Award</a>.</li>
 
 
 </references>