From 9c61abee03b49f6f9eced4a7955fad510b4d38b6 Mon Sep 17 00:00:00 2001
From: KoalaDev <6156589+Shik3i@users.noreply.github.com>
Date: Tue, 2 Jun 2026 07:50:35 +0200
Subject: [PATCH] Potential fix for code scanning alert no. 3: Incomplete URL
 substring sanitization

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 extension/content.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/extension/content.js b/extension/content.js
index 957a14b..af0574f 100644
--- a/extension/content.js
+++ b/extension/content.js
@@ -262,8 +262,8 @@
 
         try {
             const host = window.location.hostname.toLowerCase();
-            const isYouTube = host.includes('youtube.com');
-            const isTwitch  = host.includes('twitch.tv');
+            const isYouTube = host === 'youtube.com' || host.endsWith('.youtube.com');
+            const isTwitch  = host === 'twitch.tv' || host.endsWith('.twitch.tv');
 
             if (isYouTube) {
                 const ytButton = document.querySelector('.ytp-play-button');