Python: Minor doc fixes from review

Author: RasmusWL

python/ql/src/experimental/CWE-091/Xslt.qhelp

@@ -7,7 +7,7 @@
     </overview>
     <recommendation>
         <p>
-            This vulnerability can be prevented by not allowing untrusted user input to be passed as a XSL stylesheet.
+            This vulnerability can be prevented by not allowing untrusted user input to be passed as an XSL stylesheet.
             If the application logic necessiates processing untrusted XSL stylesheets, the input should be properly filtered and sanitized before use.
         </p>
     </recommendation>

python/ql/src/experimental/semmle/python/security/injection/XSLT.qll

@@ -41,22 +41,23 @@ module XSLTInjection {
   }
 
   private predicate etreeXML(ControlFlowNode fromnode, CallNode tonode) {
+    // etree.XML("<xmlContent>")
     exists(CallNode call | call.getFunction().(AttrNode).getObject("XML").pointsTo(etree()) |
       call.getArg(0) = fromnode and
       call = tonode
     )
   }
 
   private predicate etreeFromString(ControlFlowNode fromnode, CallNode tonode) {
-    // fromstring(text, parser=None)
+    // etree.fromstring(text, parser=None)
     exists(CallNode call | call.getFunction().(AttrNode).getObject("fromstring").pointsTo(etree()) |
       call.getArg(0) = fromnode and
       call = tonode
     )
   }
 
   private predicate etreeFromStringList(ControlFlowNode fromnode, CallNode tonode) {
-    // fromstringlist(strings, parser=None)
+    // etree.fromstringlist(strings, parser=None)
     exists(CallNode call |
       call.getFunction().(AttrNode).getObject("fromstringlist").pointsTo(etree())
     |