github
diff --git a/‎javascript/ql/src/Security/CWE-094/ExpressionInjection.ql‎
Lines changed: 2 additions & 2 deletions b/‎javascript/ql/src/Security/CWE-094/ExpressionInjection.ql‎
Lines changed: 2 additions & 2 deletions
@@ -169,5 +169,5 @@ where
     isExternalUserControlledWorkflowRun(context)
   )
 select node,
-  "Potential injection from the " + injection +
-    " context, which may be controlled by an external user."
+  "Potential injection from the ${ " + injection +
+    " }, which may be controlled by an external user."
Original file line number	Diff line number	Diff line change
`@@ -169,5 +169,5 @@ where`
`169`	`169`	`isExternalUserControlledWorkflowRun(context)`
`170`	`170`	`)`
`171`	`171`	`select node,`
`172`		`- "Potential injection from the " + injection +`
`173`		`- " context, which may be controlled by an external user."`
	`172`	`+ "Potential injection from the ${ " + injection +`
	`173`	`+ " }, which may be controlled by an external user."`