update js/tainted-format-string to match ruby/java

Author: erik-krogh

javascript/ql/src/Security/CWE-134/TaintedFormatString.ql

@@ -16,5 +16,5 @@ import DataFlow::PathGraph
 
 from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
 where cfg.hasFlowPath(source, sink)
-select sink.getNode(), source, sink, "$@ flows here and is used in a format string.",
+select sink.getNode(), source, sink, "$@ flows to here and is used in a format string.",
   source.getNode(), "User-provided value"