microsoft
diff --git a/‎javascript/ql/src/Security/CWE-094/ExpressionInjection.ql
Lines changed: 2 additions & 2 deletions b/‎javascript/ql/src/Security/CWE-094/ExpressionInjection.ql
Lines changed: 2 additions & 2 deletions
@@ -266,5 +266,5 @@ where
     )
   )
 select node,
-  "Potential injection from the ${ " + injection +
-    " }, which may be controlled by an external user."
+  "Potential injection from the ${{ " + injection +
+    " }}, which may be controlled by an external user."
Original file line number	Diff line number	Diff line change
`@@ -266,5 +266,5 @@ where`
`266`	`266`	`)`
`267`	`267`	`)`
`268`	`268`	`select node,`
`269`		`- "Potential injection from the ${ " + injection +`
`270`		`- " }, which may be controlled by an external user."`
	`269`	`+ "Potential injection from the ${{ " + injection +`
	`270`	`+ " }}, which may be controlled by an external user."`