Apply suggestions from code review

Co-authored-by: Felicity Chapman <felicitymay@github.com>

Author: max-schaefer

csharp/ql/src/Security Features/CWE-079/XSS.qhelp

@@ -12,9 +12,9 @@ without properly sanitizing the input first, allows for a cross-site scripting v
 <recommendation>
 
 <p>
-To guard against cross-site scripting, consider using a library providing suitable encoding
-functionality, such as the <code>System.Net.WebUtility</code> class to sanitize the untrusted input before writing it to the page.
-The references also mention other possible solutions.
+To guard against cross-site scripting, consider using a library that provides suitable encoding
+functionality, such as the <code>System.Net.WebUtility</code> class, to sanitize the untrusted input before writing it to the page.
+For other possible solutions, see the references.
 </p>
 
 </recommendation>
@@ -26,7 +26,7 @@ leaving the website vulnerable to cross-site scripting.
 </p>
 <sample src="XSSBad.cs" />
 <p>
-Sanitizing the user-controlled data using <code>WebUtility.HtmlEncode</code> method prevents the vulnerability:
+Sanitizing the user-controlled data using the <code>WebUtility.HtmlEncode</code> method prevents the vulnerability:
 </p>
 <sample src="XSSGood.cs" />