Fix typos

Author: joefarebrother

csharp/ql/src/Security Features/CWE-639/InsecureDirectObjectReference.qhelp

@@ -18,7 +18,7 @@ Ensure that the current user is authorized to access the resource of the provide
 <p>In the following example, in the case marked BAD, there is no authorization check, so any user is able to edit any comment.
 In the case marked GOOD, there is a check that the current usr matches the author of the comment.</p>
 <sample src="WebFormsExample.cs" />
-<p>The following example shows a similar case for the ASP.NET Core framweork.</p>
+<p>The following example shows a similar case for the ASP.NET Core framework.</p>
 <sample src="MVCExample.cs" />
 
 

csharp/ql/test/query-tests/Security Features/CWE-639/MVCTests/ProfileController.cs

@@ -9,7 +9,7 @@ public ActionResult Edit1(int profileId, string text) {
         return View();
     }
 
-    // BAD: The AllowAnonymous attribute therides the Authorize attribute on the class.
+    // BAD: The AllowAnonymous attribute overrides the Authorize attribute on the class.
     [AllowAnonymous]
     public ActionResult Edit2(int profileId, string text) {
         editProfileName(profileId, text);