Clarify some comments

Author: koesie10

extensions/ql-vscode/src/interface-utils.ts

@@ -166,7 +166,9 @@ export function getHtmlForWebview(
   /*
    * Content security policy:
    * default-src: allow nothing by default.
-   * script-src: allow the given script, using the nonce. also allow loading WebAssembly modules.
+   * script-src:
+   *   - allow the given script, using the nonce.
+   *   - 'wasm-unsafe-eval: allow loading WebAssembly modules if necessary.
    * style-src: allow only the given stylesheet, using the nonce.
    * connect-src: only allow fetch calls to webview resource URIs
    * (this is used to load BQRS result files).

extensions/ql-vscode/src/interface.ts

@@ -658,7 +658,7 @@ export class ResultsView extends AbstractWebview<
     }
     let data;
     let numTotalResults;
-    // Graph results are only supported in canary mode because the graph viewer is unsupported
+    // Graph results are only supported in canary mode because the graph viewer is not actively supported
     if (metadata?.kind === GRAPH_TABLE_NAME && isCanary()) {
       data = await interpretGraphResults(
         this.cliServer,