added tests for CDO and CDC now that we have changed how dashes are allowed in font names

Author: mikesamuel

src/test/java/org/owasp/html/StylingPolicyTest.java

@@ -335,6 +335,15 @@ public static final void testImportant() {
         "color:purple !foo(bar) important");
   }
 
+  @Test
+  public static final void testCdoCdc() {
+    // No <!-- or --> in output.
+    assertSanitizedCss("font-family:'a--' 'b'", "font-family: a--\\>b");
+    assertSanitizedCss("font-family:'a' '--b'", "font-family: a<\\!--b");
+    assertSanitizedCss("font-family:'a--' 'b'", "font-family: a-->b");
+    assertSanitizedCss("font-family:'a b'", "font-family: a<!--b");
+  }
+
   private static void assertSanitizedCss(
       @Nullable String expectedCss, String css) {
     StylingPolicy stylingPolicy = new StylingPolicy(