Fix examples

Author: gagliardetto

ql/src/experimental/CWE-352/ConstantOauth2StateBad.go

@@ -1,8 +1,6 @@
 package main
 
 import (
-	"fmt"
-
 	"golang.org/x/oauth2"
 )
 
@@ -21,7 +19,6 @@ func badWithStringLiteralState() {
 		},
 	}
 
-	url := conf.AuthCodeURL(stateStringVar, oauth2.AccessTypeOffline)
-	fmt.Printf("Visit the URL for the auth dialog: %v", url)
+	url := conf.AuthCodeURL(stateStringVar)
 	// ...
 }

ql/src/experimental/CWE-352/ConstantOauth2StateBetter.go

@@ -27,7 +27,8 @@ func betterWithVariableStateReturned(w http.ResponseWriter) {
 func generateStateOauthCookie(w http.ResponseWriter) string {
 	b := make([]byte, 128)
 	rand.Read(b)
-	// TODO: save the state string to cookies or HTML storage.
+	// TODO: save the state string to cookies or HTML storage,
+	// and bind it to the authenticated status of the user.
 	state := base64.URLEncoding.EncodeToString(b)
 
 	return state