JS: Fix some mistranslated OK-style comments and match actual query output

Author: asgerf

javascript/ql/test/query-tests/Security/CWE-601/ClientSideUrlRedirect/tst15.js

@@ -1,6 +1,6 @@
 function foo() {
     var url = document.location.toString();
-    window.location = url.substring(0).substring(1); // OK [INCONSISTENCY] - but not important
+    window.location = url.substring(0).substring(1); // $ SPURIOUS: Alert - but not important
     window.location = url.substring(0, 10).substring(1); // $ SPURIOUS: Alert
     window.location = url.substring(0, url.indexOf('/', 10)).substring(1); // $ SPURIOUS: Alert
 

javascript/ql/test/query-tests/Security/CWE-601/ServerSideUrlRedirect/koa.js

@@ -17,7 +17,7 @@ app.use(async ctx => {
 	if(!url || isCrossDomainRedirect || url.match(VALID)) {
 		ctx.redirect('/');
 	} else {
-		ctx.redirect(url); // possibly OK - flagged anyway
+		ctx.redirect(url); // $ Alert - possibly OK but flagged anyway
 	}
 
 	if(!url || isCrossDomainRedirect || url.match(/[^\w/-]/)) {