git-watchtower 1.11.7 → 1.11.9

package/bin/git-watchtower.js

@@ -1097,7 +1097,9 @@ function write(str) {
 function setTerminalTitle(title) {
   // Set terminal tab/window title using ANSI escape sequence
   // \x1b]0;title\x07 sets both window and tab title (most compatible)
-  process.stdout.write(`\x1b]0;${title}\x07`);
+  // Strip control characters to prevent escape sequence injection
+  const safe = String(title).replace(/[\x00-\x1f\x7f]/g, '');
+  process.stdout.write(`\x1b]0;${safe}\x07`);
 }
 
 function restoreTerminalTitle() {
@@ -2219,6 +2221,9 @@ function setupKeyboardInput() {
   process.stdin.resume();
   process.stdin.setEncoding('utf8');
 
+  // Suppress EIO errors that occur when the PTY is torn down during exit
+  process.stdin.on('error', () => {});
+
   process.stdin.on('data', async (key) => {
     // Handle search mode input via actions module
     if (store.get('searchMode')) {
@@ -3223,6 +3228,7 @@ async function shutdown() {
   if (process.stdin.isTTY) {
     process.stdin.setRawMode(false);
   }
+  process.stdin.pause();
 
   if (fileWatcher) fileWatcher.close();
   if (pollIntervalId) clearTimeout(pollIntervalId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "git-watchtower",
-  "version": "1.11.7",
+  "version": "1.11.9",
   "description": "Terminal-based Git branch monitor with activity sparklines and optional dev server with live reload",
   "main": "bin/git-watchtower.js",
   "bin": {

package/src/git/remote.js

@@ -71,11 +71,12 @@ function buildBranchUrl(baseUrl, host, branchName) {
 function detectPlatform(webUrl) {
   if (!webUrl) return null;
   try {
-    const host = new URL(webUrl).hostname;
-    if (host === 'github.com' || host.includes('github')) return 'github';
-    if (host === 'gitlab.com' || host.includes('gitlab')) return 'gitlab';
-    if (host === 'bitbucket.org' || host.includes('bitbucket')) return 'bitbucket';
-    if (host === 'dev.azure.com' || host.includes('visualstudio.com')) return 'azure';
+    const host = new URL(webUrl).hostname.toLowerCase();
+    const parts = host.split('.');
+    if (host === 'github.com' || parts.includes('github')) return 'github';
+    if (host === 'gitlab.com' || parts.includes('gitlab')) return 'gitlab';
+    if (host === 'bitbucket.org' || parts.includes('bitbucket')) return 'bitbucket';
+    if (host === 'dev.azure.com' || host.endsWith('.visualstudio.com')) return 'azure';
   } catch (e) { /* ignore */ }
   return 'github'; // default assumption for self-hosted
 }