git-watchtower 1.11.7 → 1.11.8

package/bin/git-watchtower.js

@@ -1097,7 +1097,9 @@ function write(str) {
 function setTerminalTitle(title) {
   // Set terminal tab/window title using ANSI escape sequence
   // \x1b]0;title\x07 sets both window and tab title (most compatible)
-  process.stdout.write(`\x1b]0;${title}\x07`);
+  // Strip control characters to prevent escape sequence injection
+  const safe = String(title).replace(/[\x00-\x1f\x7f]/g, '');
+  process.stdout.write(`\x1b]0;${safe}\x07`);
 }
 
 function restoreTerminalTitle() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "git-watchtower",
-  "version": "1.11.7",
+  "version": "1.11.8",
   "description": "Terminal-based Git branch monitor with activity sparklines and optional dev server with live reload",
   "main": "bin/git-watchtower.js",
   "bin": {

package/src/git/remote.js

@@ -71,11 +71,12 @@ function buildBranchUrl(baseUrl, host, branchName) {
 function detectPlatform(webUrl) {
   if (!webUrl) return null;
   try {
-    const host = new URL(webUrl).hostname;
-    if (host === 'github.com' || host.includes('github')) return 'github';
-    if (host === 'gitlab.com' || host.includes('gitlab')) return 'gitlab';
-    if (host === 'bitbucket.org' || host.includes('bitbucket')) return 'bitbucket';
-    if (host === 'dev.azure.com' || host.includes('visualstudio.com')) return 'azure';
+    const host = new URL(webUrl).hostname.toLowerCase();
+    const parts = host.split('.');
+    if (host === 'github.com' || parts.includes('github')) return 'github';
+    if (host === 'gitlab.com' || parts.includes('gitlab')) return 'gitlab';
+    if (host === 'bitbucket.org' || parts.includes('bitbucket')) return 'bitbucket';
+    if (host === 'dev.azure.com' || host.endsWith('.visualstudio.com')) return 'azure';
   } catch (e) { /* ignore */ }
   return 'github'; // default assumption for self-hosted
 }