feat(webui): make HTTP/HTTPS URLs clickable in Tracker Status

[jakobbg]

Summary

This PR enables automatic conversion of http:// and https:// URLs in the Tracker status field (under the "General" torrent details tab) into safe, clickable links that open in a new tab.

Key Changes

• Helper Function (getClickableTrackerStatus):

  • Added a type-hinted JSDoc helper getClickableTrackerStatus(text) in js/common.js.
  • XSS Prevention: Sanitizes raw input with escapeHTML() (escaping &, <, >, ", ') before parsing links.
  • URL Parsing: Matches http:// and https:// links embedded in text (e.g., "New torrent at https://tracker.example.com/torrent.php?id=123. Please update.").
  • Trailing Punctuation: Excludes trailing ., ), and , punctuation from the hyperlink tag so they remain as normal trailing text.
  • Security Attributes: Opens links with target="_blank" and rel="noopener noreferrer".

• WebUI Details Tab:

  • Updated #ts element rendering in js/webui.js to use getClickableTrackerStatus(d.msg).

• Automated Tests:

  • Added unit test suite in tests/js/trackerstatus.spec.js testing link generation, text surrounding URLs, trailing punctuation stripping, XSS sanitization, and protocol filtering.

Verification

Run Jest test suite:

cd tests
npm test