update alert-messages of the sensitive data queries to match #10314

Author: erik-krogh

javascript/ql/src/Security/CWE-312/CleartextLogging.ql

@@ -38,5 +38,5 @@ where
   cfg.hasFlowPath(source, sink) and
   // ignore logging to the browser console (even though it is not a good practice)
   not inBrowserEnvironment(sink.getNode().asExpr().getTopLevel())
-select sink.getNode(), source, sink, "Log entry depends on $@.", source.getNode(),
-  "sensitive data returned by " + source.getNode().(Source).describe()
+select sink.getNode(), source, sink, "$@ is logged here.", source.getNode(),
+  "Sensitive data returned by " + source.getNode().(Source).describe()

javascript/ql/src/Security/CWE-312/CleartextStorage.ql

@@ -19,5 +19,5 @@ import DataFlow::PathGraph
 
 from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
 where cfg.hasFlowPath(source, sink)
-select sink.getNode(), source, sink, "This data storage depends on $@.", source.getNode(),
-  "sensitive data returned by " + source.getNode().(Source).describe()
+select sink.getNode(), source, sink, "$@ is stored here.", source.getNode(),
+  "Sensitive data returned by " + source.getNode().(Source).describe()