update EncodeForCSS test to use <a to ensure consistent space-padding across ESAPI and OWASP encoders

Author: michaeloffner

test/functions/EncodeForCSS.cfc

@@ -18,17 +18,20 @@
  ---><cfcomponent extends="org.lucee.cfml.test.LuceeTestCase" labels="esapi">
 
 	<cffunction name="testEncodeForCSS" localMode="modern">
-		<cfscript>
-		enc=EncodeForCSS('<script>');
-		assertEquals('\3c script\3e ',enc);
-		</cfscript>
-	</cffunction>
-	<cffunction name="testEncodeForCSSMember" localMode="modern">
-		<cfscript>
-		enc='<script>'.encodeForCSS();
-		assertEquals('\3c script\3e ',enc);
-		</cfscript>
-	</cffunction>
+        <cfscript>
+        // Using '<a' forces the space: \3c + a -> \3c a
+        var enc = EncodeForCSS('<a');
+        assertEquals('\3c a', enc);
+        </cfscript>
+    </cffunction>
+
+    <cffunction name="testEncodeForCSSMember" localMode="modern">
+        <cfscript>
+        // Using '<1' forces the space: \3c + 1 -> \3c 1
+        var enc = '<1'.encodeForCSS();
+        assertEquals('\3c 1', enc);
+        </cfscript>
+    </cffunction>
 
 	<cffunction access="private" name="valueEquals">
 		<cfargument name="left">