feat(web): translations containing html (#10491)

* feat(web): translations containing html

* add tests and more translations

* more translations

* rename FormatTags --> FormatMessage

* update version_announcement_message

web/src/lib/components/i18n/__test__/format-message.spec.ts

@@ -0,0 +1,78 @@
+import FormatTagB from '$lib/components/i18n/__test__/format-tag-b.svelte';
+import FormatMessage from '$lib/components/i18n/format-message.svelte';
+import '@testing-library/jest-dom';
+import { render, screen } from '@testing-library/svelte';
+import { init, json, locale, register, waitLocale } from 'svelte-i18n';
+import { get } from 'svelte/store';
+import { describe } from 'vitest';
+
+describe('FormatMessage component', () => {
+  let $json: (id: string, locale?: string | undefined) => unknown;
+
+  beforeAll(async () => {
+    register('en', () =>
+      Promise.resolve({
+        hello: 'Hello {name}',
+        html: 'Hello <b>{name}</b>',
+        plural: 'You have <b>{count, plural, one {# item} other {# items}}</b>',
+        xss: '<image/src/onerror=prompt(8)>',
+      }),
+    );
+
+    await init({ fallbackLocale: 'en' });
+    await waitLocale('en');
+    $json = get(json);
+  });
+
+  it('formats a plain text message', () => {
+    render(FormatMessage, {
+      message: $json('hello'),
+      values: { name: 'test' },
+    });
+    expect(screen.getByText('Hello test')).toBeInTheDocument();
+  });
+
+  it('throws an error when locale is empty', async () => {
+    await locale.set(undefined);
+    expect(() => render(FormatMessage, { message: undefined })).toThrowError();
+    await locale.set('en');
+  });
+
+  it('shows raw message when value is empty', () => {
+    render(FormatMessage, {
+      message: $json('hello'),
+    });
+    expect(screen.getByText('Hello {name}')).toBeInTheDocument();
+  });
+
+  it('shows message when slot is empty', () => {
+    render(FormatMessage, {
+      message: $json('html'),
+      values: { name: 'test' },
+    });
+    expect(screen.getByText('Hello test')).toBeInTheDocument();
+  });
+
+  it('renders a message with html', () => {
+    const { container } = render(FormatTagB, {
+      message: $json('html'),
+      values: { name: 'test' },
+    });
+    expect(container.innerHTML).toBe('Hello <strong>test</strong>');
+  });
+
+  it('renders a message with html and plural', () => {
+    const { container } = render(FormatTagB, {
+      message: $json('plural'),
+      values: { count: 1 },
+    });
+    expect(container.innerHTML).toBe('You have <strong>1 item</strong>');
+  });
+
+  it('protects agains XSS injection', () => {
+    render(FormatMessage, {
+      message: $json('xss'),
+    });
+    expect(screen.getByText('<image/src/onerror=prompt(8)>')).toBeInTheDocument();
+  });
+});

web/src/lib/components/i18n/__test__/format-tag-b.svelte

@@ -0,0 +1,13 @@
+<script lang="ts">
+  import FormatMessage from '../format-message.svelte';
+  import type { ComponentProps } from 'svelte';
+
+  export let message: unknown;
+  export let values: ComponentProps<FormatMessage>['values'];
+</script>
+
+<FormatMessage {message} {values} let:tag let:message>
+  {#if tag === 'b'}
+    <strong>{message}</strong>
+  {/if}
+</FormatMessage>