Skip to content

fix(ui): sanitize process output before terminal rendering - #22

Merged
maful merged 1 commit into
mainfrom
fix/sanitize-terminal-controls
Sep 12, 2026
Merged

fix(ui): sanitize process output before terminal rendering#22
maful merged 1 commit into
mainfrom
fix/sanitize-terminal-controls

Conversation

@maful

@maful maful commented Sep 12, 2026

Copy link
Copy Markdown
Owner

Summary

Process output and display metadata could reach Model.View() with arbitrary terminal control sequences intact. A process that emitted OSC or CSI controls could manipulate supported terminal state, including the window title, screen, or clipboard.

This change:

  • sanitizes log lines before retention, search indexing, and rendering
  • preserves bounded conventional SGR color and style sequences
  • removes OSC, DCS, APC, PM, SOS, cursor, screen, C0/C1, malformed, and incomplete control sequences
  • resets retained styles at log-line boundaries
  • sanitizes display-only process names, commands, paths, branches, and versions
  • keeps the original Procfile commands unchanged for execution
  • adds regression coverage for filtered and unfiltered rendering

@maful
maful merged commit 184c7fe into main Sep 12, 2026
1 check passed
@maful
maful deleted the fix/sanitize-terminal-controls branch September 12, 2026 20:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant