Replace dashes with appropriate characters

internal/server/server_test.go

@@ -936,7 +936,7 @@ func (h *harness) formUploadWith(t *testing.T, cookie *http.Cookie, fields map[s
 // --- content security policy ---------------------------------------------
 
 // The page's own behaviour and its CSP have to agree, and nothing in a Go test
-// or a curl invocation enforces CSP — only a browser does. This reads the
+// or a curl invocation enforces CSP, only a browser does. This reads the
 // script that is actually shipped, works out which fetch directives the page
 // needs, and checks the policy grants them.
 //
@@ -1284,8 +1284,8 @@ func TestAdminLinkIsShownOnlyToAdmins(t *testing.T) {
 	}
 }
 
-// Mixing the two request shapes — a multipart body with the headers the raw
-// shape uses — must not silently discard the options. Being handed a UUID when
+// Mixing the two request shapes, a multipart body with the headers the raw
+// shape uses, must not silently discard the options. Being handed a UUID when
 // you asked for a name is worse than being told no.
 func TestMultipartHonoursTheHeaderForm(t *testing.T) {
 	h := newHarness(t, nil)