Add comment

java/ql/src/Security/CWE/CWE-078/ExecTaintedEnvironmentChecked.java

@@ -1,6 +1,7 @@
 Map<String, String> env = builder.environment();
 String debug = request.getParameter("debug");
 
+// GOOD: Checking the value and not tainting the variable added to the environment
 if (debug != null) {
     env.put("PYTHONDEBUG", "1");
 }