Fix comment

library/vulnerabilities/ssrf/checkContextForSSRF.ts

@@ -21,7 +21,7 @@ export function checkContextForSSRF({
   operation: string;
   context: Context;
 }): InterceptorResult {
-  // If the hostname is a private IP address, we don't need to check for SSRF
+  // If the hostname is not a private IP address, we don't need to iterate over the user input
   // DNS lookup calls will be inspected somewhere else
   // This is just to inspect direct invocations of `http.request` and similar
   // Where the hostname might be a private IP address (or localhost)