Merge pull request #268 from sjvs/fix-javascript-example

JavaScript: fix two examples based on LGTM.com alerts

Author: Max Schaefer

javascript/ql/src/Security/CWE-079/examples/StoredXss.js

@@ -6,7 +6,7 @@ express().get('/list-directory', function(req, res) {
         var list = '<ul>';
         fileNames.forEach(fileName => {
             // BAD: `fileName` can contain HTML elements
-            list += '<li>' + fileName '</li>';
+            list += '<li>' + fileName + '</li>';
         });
         list += '</ul>'
         res.send(list);

javascript/ql/src/Security/CWE-079/examples/StoredXssGood.js

@@ -7,7 +7,7 @@ express().get('/list-directory', function(req, res) {
         var list = '<ul>';
         fileNames.forEach(fileName => {
             // GOOD: escaped `fileName` can not contain HTML elements
-            list += '<li>' + escape(fileName) '</li>';
+            list += '<li>' + escape(fileName) + '</li>';
         });
         list += '</ul>'
         res.send(list);