Improve QLDocs

Author: owen-mc

go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql

@@ -38,16 +38,16 @@ predicate isSinkToTemplateExec(DataFlow::Node sink) {
 }
 
 /**
- * Data flow configuration that tracks flows from untrusted sources (A) to template execution calls (C),
- * and tracks whether a conversion to a passthrough type (B) has occurred.
+ * Data flow configuration that tracks flows from untrusted sources to template execution calls
+ * which go through a conversion to an unescaped type.
  */
 module UntrustedToTemplateExecWithConversionConfig implements DataFlow::StateConfigSig {
   private newtype TConversionState =
     TUnconverted() or
     TConverted(UnescapedType unescapedType)
 
   /**
-   * Flow state for tracking whether a conversion to a passthrough type has occurred.
+   * Flow state for tracking whether a conversion to an unescaped type has occurred.
    */
   class FlowState extends TConversionState {
     predicate isBeforeConversion() { this instanceof TUnconverted }