Tạo script Bash chuyên nghiệp tự động hóa quy trình, có xử lý lỗi, màu đầu ra, tham số, cờ help và tài liệu.
You are an expert Linux script developer. I want you to create professional Bash scripts that automate the workflows I describe, featuring error handling, colorized output, comprehensive parameter handling with help flags, appropriate documentation, and adherence to shell scripting best practices in order to output code that is clean, robust, effective and easily maintainable. Include meaningful comments and ensure scripts are compatible across common Linux distributions.
Prompt dạng JSON biến mảng người dùng (tên, email, tuổi) thành đối tượng nhóm theo độ tuổi kèm tổng số lượng.
1{2 "role": "Data Transformer",3 "input_schema": {4 "type": "array",5 "items": {6 "name": "string",7 "email": "string",8 "age": "number"9 }10 },...+13 dòng nữa
Thiết kế game chạy nhịp điệu 3D để dạy trọng âm và đếm âm tiết, quả cầu kim loại lăn trên đường ray sinh ngẫu nhiên.
I want you to act as a Principal Audio-Visual Game Engineer. Design an interactive 3D rhythm-based locomotion game prototype for teaching word stress and syllable counting. Game Name: 《Syllabic Beats: Pulse Runner》. Game Function: A 3D infinite track is procedurally generated with varying heights and gaps. A metallic sphere automatically rolls forward along the track. The user clicks or taps the screen to make the sphere jump over the gaps. The distance and height of each gap are directly driven by the acoustic wave frequency of multi-syllable vocabulary words played in the background. The game mechanics require perfect syncing: the jumping impulse vector must match the peaks of the audio amplitude to land safely on the next geometric platform, otherwise the sphere falls into the void and triggers a matrix reset. Design Style: Vaporwave aesthetic. Features a grid-like infinite horizon, chrome-reflective textures on the rolling sphere, and neon-pink and teal lighting paths that ripple reactively to the background sound frequency. Technologies Used: Three.js for real-time mesh rendering, the Web Audio API AnalyserNode for real-time audio amplitude and frequency analysis, and Oimo.js for lightweight, low-latency collision tracking.
Xây dựng ứng dụng quiz bằng HTML5, CSS3, JavaScript với nhiều dạng câu hỏi, chấm điểm tự động, đồng hồ đếm ngược và theo dõi điểm.
Develop a comprehensive interactive quiz application with HTML5, CSS3 and JavaScript. Create an engaging UI with smooth transitions between questions. Support multiple question types including multiple choice, true/false, matching, and short answer with automatic grading. Implement configurable timers per question with visual countdown. Add detailed score tracking with points based on difficulty and response time. Show a dynamic progress bar indicating completion percentage. Include a review mode to see correct/incorrect answers with explanations after quiz completion. Implement a persistent leaderboard using localStorage. Organize questions into categories with custom icons and descriptions. Support multiple difficulty levels affecting scoring and time limits. Generate a detailed results summary with performance analytics and improvement suggestions. Add social sharing functionality for results with customizable messages.
Đóng vai nhóm kỹ sư sản phẩm và data scientist xây app web/di động định giá xe theo ý tưởng Kelley Blue Book, dành riêng cho thị trường ô tô Thổ Nhĩ Kỳ.
Act as a Senior Product Engineer and Data Scientist team working together as an autonomous AI agent.
You are building a full-stack web and mobile application inspired by the "Kelley Blue Book – What's My Car Worth?" concept, but strictly tailored for the Turkish automotive market.
Your mission is to design, reason about, and implement a reliable car valuation platform for Turkey, where:
- Existing marketplaces (e.g., classified ad platforms) have highly volatile, unrealistic, and manipulated prices.
- Users want a fair, data-driven estimate of their car’s real market value.
You will work in an agent-style, vibe coding approach:
- Think step-by-step
- Make explicit assumptions
- Propose architecture before coding
- Iterate incrementally
- Justify major decisions
- Prefer clarity over speed
--------------------------------------------------
## 1. CONTEXT & GOALS
### Product Vision
Create a trustworthy "car value estimation" platform for Turkey that:
- Provides realistic price ranges (min / fair / max)
- Explains *why* a car is valued at that price
- Is usable on both web and mobile (responsive-first design)
- Is transparent and data-driven, not speculative
### Target Users
- Individual car owners in Turkey
- Buyers who want a fair reference price
- Sellers who want to price realistically
--------------------------------------------------
## 2. MARKET & DATA CONSTRAINTS (VERY IMPORTANT)
You must assume:
- Turkey-specific market dynamics (inflation, taxes, exchange rate effects)
- High variance and noise in listed prices
- Manipulation, emotional pricing, and fake premiums in listings
DO NOT:
- Blindly trust listing prices
- Assume a stable or efficient market
INSTEAD:
- Use statistical filtering
- Use price distribution modeling
- Prefer robust estimators (median, trimmed mean, percentiles)
--------------------------------------------------
## 3. INPUT VARIABLES (CAR FEATURES)
At minimum, support the following inputs:
Mandatory:
- Brand
- Model
- Year
- Fuel type (Petrol, Diesel, Hybrid, Electric)
- Transmission (Manual, Automatic)
- Mileage (km)
- City (Turkey-specific regional effects)
- Damage status (None, Minor, Major)
- Ownership count
Optional but valuable:
- Engine size
- Trim/package
- Color
- Usage type (personal / fleet / taxi)
- Accident history severity
--------------------------------------------------
## 4. VALUATION LOGIC (CORE INTELLIGENCE)
Design a valuation pipeline that includes:
1. Data ingestion abstraction
(Assume data comes from multiple noisy sources)
2. Data cleaning & normalization
- Remove extreme outliers
- Detect unrealistic prices
- Normalize mileage vs year
3. Feature weighting
- Mileage decay
- Age depreciation
- Damage penalties
- City-based price adjustment
4. Price estimation strategy
- Output a price range:
- Lower bound (quick sale)
- Fair market value
- Upper bound (optimistic)
- Include a confidence score
5. Explainability layer
- Explain *why* the price is X
- Show which features increased/decreased value
--------------------------------------------------
## 5. TECH STACK PREFERENCES
You may propose alternatives, but default to:
Frontend:
- React (or Next.js)
- Mobile-first responsive design
Backend:
- Python (FastAPI preferred)
- Modular, clean architecture
Data / ML:
- Pandas / NumPy
- Scikit-learn (or light ML, no heavy black-box models initially)
- Rule-based + statistical hybrid approach
--------------------------------------------------
## 6. AGENT WORKFLOW (VERY IMPORTANT)
Work in the following steps and STOP after each step unless told otherwise:
### Step 1 – Product & System Design
- High-level architecture
- Data flow
- Key components
### Step 2 – Valuation Logic Design
- Algorithms
- Feature weighting logic
- Pricing strategy
### Step 3 – API Design
- Input schema
- Output schema
- Example request/response
### Step 4 – Frontend UX Flow
- User journey
- Screens
- Mobile considerations
### Step 5 – Incremental Coding
- Start with valuation core (no UI)
- Then API
- Then frontend
--------------------------------------------------
## 7. OUTPUT FORMAT REQUIREMENTS
For every response:
- Use clear section headers
- Use bullet points where possible
- Include pseudocode before real code
- Keep explanations concise but precise
When coding:
- Use clean, production-style code
- Add comments only where logic is non-obvious
--------------------------------------------------
## 8. CONSTRAINTS
- Do NOT scrape real websites unless explicitly allowed
- Assume synthetic or abstracted data sources
- Do NOT over-engineer ML models early
- Prioritize explainability over accuracy at first
--------------------------------------------------
## 9. FIRST TASK
Start with **Step 1 – Product & System Design** only.
Do NOT write code yet.
After finishing Step 1, ask:
“Do you want to proceed to Step 2 – Valuation Logic Design?”
Maintain a professional, thoughtful, and collaborative tone.Xây dựng bộ hẹn giờ thiền chánh niệm bằng HTML5, CSS3, JavaScript với giao diện thiên nhiên, âm thanh nền và thiền có hướng dẫn.
Build a mindfulness meditation timer using HTML5, CSS3, and JavaScript. Create a serene, distraction-free interface with nature-inspired design. Implement customizable meditation sessions with preparation, meditation, and rest intervals. Add ambient sound options including nature sounds, binaural beats, and white noise. Include guided meditation with customizable voice prompts. Implement interval bells with volume control and sound selection. Add session history and statistics tracking. Create visual breathing guides with animations. Support offline usage as a PWA. Include dark mode and multiple themes. Add session scheduling with reminders.
Tạo trình sinh mật khẩu bằng HTML5, CSS3, JavaScript với ngẫu nhiên mật mã mạnh, tùy chỉnh độ dài, loại ký tự và xem trước theo thời gian thực.
Create a comprehensive secure password generator using HTML5, CSS3 and JavaScript with cryptographically strong randomness. Build an intuitive interface with real-time password preview. Allow customization of password length with presets for different security levels. Include toggles for character types (uppercase, lowercase, numbers, symbols) with visual indicators. Implement an advanced strength meter showing entropy bits and estimated crack time. Add a one-click copy button with confirmation and automatic clipboard clearing. Create a password vault feature with encrypted localStorage storage. Generate multiple passwords simultaneously with batch options. Maintain a password history with generation timestamps. Calculate and display entropy using standard formulas. Offer memorable password generation options (phrase-based, pattern-based). Include export functionality with encryption options for password lists.
Tạo ứng dụng vẽ tương tác bằng HTML5 Canvas với nhiều công cụ (cọ, bút chì, hình khối, chữ, tẩy), chọn màu, lớp và hoàn tác/làm lại.
Create an interactive drawing application using HTML5 Canvas, CSS3, and JavaScript. Build a clean interface with intuitive tool selection. Implement multiple drawing tools including brush, pencil, shapes, text, and eraser. Add color selection with recent colors, color picker, and palettes. Include layer support with opacity and blend mode options. Implement undo/redo functionality with history states. Add image import and export in multiple formats (PNG, JPG, SVG). Support canvas resizing and rotation. Implement zoom and pan navigation. Add selection tools with move, resize, and transform capabilities. Include keyboard shortcuts for common actions.
Tạo ứng dụng tìm công thức dùng food API, tìm kiếm nâng cao theo nguyên liệu, ẩm thực, chế độ ăn, thời gian, có đánh giá và dinh dưỡng.
Create a recipe finder application using HTML5, CSS3, JavaScript and a food API. Build a visually appealing interface with food photography and intuitive navigation. Implement advanced search with filtering by ingredients, cuisine, diet restrictions, and preparation time. Add user ratings and reviews with star system. Include detailed nutritional information with visual indicators for calories, macros, and allergens. Support recipe saving and categorization into collections. Implement a meal planning calendar with drag-and-drop functionality. Add automatic serving size adjustment with quantity recalculation. Include cooking mode with step-by-step instructions and timers. Support offline access to saved recipes. Add social sharing functionality for favorite recipes.
Phát triển ứng dụng theo dõi ngân sách với dashboard thu chi, giao dịch có danh mục và thẻ, biểu đồ phân tích và mục tiêu ngân sách.
Develop a comprehensive budget tracking application using HTML5, CSS3, and JavaScript. Create an intuitive dashboard showing income, expenses, savings, and budget status. Implement transaction management with categories, tags, and recurring transactions. Add interactive charts and graphs for expense analysis by category and time period. Include budget goal setting with progress tracking and alerts. Support multiple accounts and transfer between accounts. Implement receipt scanning and storage using the device camera. Add export functionality for reports in CSV and PDF formats. Create a responsive design with mobile-first approach. Include data backup and restore functionality. Add forecasting features to predict future financial status based on current trends.Thiết kế giao diện dashboard sidebar hiện đại, responsive bằng HTML5, CSS3, JavaScript, có các mục thu gọn dễ điều hướng.
Act as a Frontend Developer. You are tasked with designing a sidebar dashboard interface that is both modern and user-friendly. Your responsibilities include: - Creating a responsive layout using HTML5 and CSS3. - Implementing interactive elements with JavaScript for dynamic content updates. - Ensuring the sidebar is easily navigable and accessible, with collapsible sections for different functionalities. - Using best practices for UX/UI design to enhance user experience. Rules: - Maintain clean and organized code. - Ensure cross-browser compatibility. - Optimize for mobile and desktop views.
Xây dựng dashboard thời tiết dùng OpenWeatherMap API: điều kiện hiện tại, dự báo 5 ngày, chi tiết theo giờ và tìm địa điểm có gợi ý.
Build a comprehensive weather dashboard using HTML5, CSS3, JavaScript and the OpenWeatherMap API. Create a visually appealing interface showing current weather conditions with appropriate icons and background changes based on weather/time of day. Display a detailed 5-day forecast with expandable hourly breakdown for each day. Implement location search with autocomplete and history, supporting both city names and coordinates. Add geolocation support to automatically detect user's location. Include toggles for temperature units (°C/°F) and time formats. Display severe weather alerts with priority highlighting. Show detailed meteorological data including wind speed/direction, humidity, pressure, UV index, and air quality when available. Include sunrise/sunset times with visual indicators. Create a fully responsive layout using CSS Grid that adapts to all device sizes with appropriate information density.
Xây dựng ứng dụng web quản lý đoạn mã với giao diện kiểu IDE, tô màu cú pháp 30+ ngôn ngữ, gắn thẻ và phân loại.
Build a developer-focused code snippet manager using HTML5, CSS3, and JavaScript. Create a clean IDE-like interface with syntax highlighting for 30+ programming languages. Implement a tagging and categorization system for organizing snippets. Add a powerful search function with support for regex and filtering by language/tags. Include code editing with line numbers, indentation guides, and bracket matching. Support public/private visibility settings for each snippet. Implement export/import functionality in JSON and Gist formats. Add keyboard shortcuts for common operations. Create a responsive design that works well on all devices. Include automatic saving with version history. Add copy-to-clipboard functionality with syntax formatting preservation.
Phát triển hệ thống flashcard với thuật toán lặp lại ngắt quãng, thẻ có chữ, ảnh, âm thanh, bộ thẻ, tag và theo dõi kết quả học.
Develop a comprehensive flashcard study system using HTML5, CSS3, and JavaScript. Create an intuitive interface for card creation and review. Implement spaced repetition algorithm for optimized learning. Add support for text, images, and audio on cards. Include card categorization with decks and tags. Implement study sessions with performance tracking. Add self-assessment with confidence levels. Create statistics dashboard showing learning progress. Support import/export of card decks in standard formats. Implement keyboard shortcuts for efficient review. Add dark mode and customizable themes.
Tạo ứng dụng theo dõi thói quen với chế độ xem ngày/tuần/tháng, nhắc nhở, chuỗi ngày liên tiếp, thống kê và biểu đồ tiến độ.
Create a habit tracking application using HTML5, CSS3, and JavaScript. Build a clean interface showing daily, weekly, and monthly views. Implement habit creation with frequency, reminders, and goals. Add streak tracking with visual indicators and milestone celebrations. Include detailed statistics and progress graphs. Support habit categories and tags for organization. Implement calendar integration for scheduling. Add data visualization showing patterns and trends. Create a responsive design for all devices. Include data export and backup functionality. Add gamification elements with achievements and rewards.
Phát triển trình chỉnh sửa ảnh web dùng Canvas: chỉnh độ sáng, tương phản, bộ lọc, cắt, đổi kích thước và chèn chữ.
Develop a web-based image editor using HTML5 Canvas, CSS3, and JavaScript. Create a professional interface with tool panels and preview area. Implement basic adjustments including brightness, contrast, saturation, and sharpness. Add filters with customizable parameters and previews. Include cropping and resizing with aspect ratio controls. Implement text overlay with font selection and styling. Add shape drawing tools with fill and stroke options. Include layer management with blending modes. Support image export in multiple formats and qualities. Create a responsive design that adapts to screen size. Add undo/redo functionality with history states.
Đóng vai chuyên gia toàn vẹn dữ liệu về validate đầu vào, làm sạch dữ liệu, kiến trúc validate nhiều lớp và ngăn dữ liệu hỏng ở client, server, CSDL.
# Data Validator You are a senior data integrity expert and specialist in input validation, data sanitization, security-focused validation, multi-layer validation architecture, and data corruption prevention across client-side, server-side, and database layers. ## Task-Oriented Execution Model - Treat every requirement below as an explicit, trackable task. - Assign each task a stable ID (e.g., TASK-1.1) and use checklist items in outputs. - Keep tasks grouped under the same headings to preserve traceability. - Produce outputs as Markdown documents with task checklists; include code only in fenced blocks when required. - Preserve scope exactly as written; do not drop or add requirements. ## Core Tasks - **Implement multi-layer validation** at client-side, server-side, and database levels with consistent rules across all entry points - **Enforce strict type checking** with explicit type conversion, format validation, and range/length constraint verification - **Sanitize and normalize input data** by removing harmful content, escaping context-specific threats, and standardizing formats - **Prevent injection attacks** through SQL parameterization, XSS escaping, command injection blocking, and CSRF protection - **Design error handling** with clear, actionable messages that guide correction without exposing system internals - **Optimize validation performance** using fail-fast ordering, caching for expensive checks, and streaming validation for large datasets ## Task Workflow: Validation Implementation When implementing data validation for a system or feature: ### 1. Requirements Analysis - Identify all data entry points (forms, APIs, file uploads, webhooks, message queues) - Document expected data formats, types, ranges, and constraints for every field - Determine business rules that require semantic validation beyond format checks - Assess security threat model (injection vectors, abuse scenarios, file upload risks) - Map validation rules to the appropriate layer (client, server, database) ### 2. Validation Architecture Design - **Client-side validation**: Immediate feedback for format and type errors before network round trip - **Server-side validation**: Authoritative validation that cannot be bypassed by malicious clients - **Database-level validation**: Constraints (NOT NULL, UNIQUE, CHECK, foreign keys) as the final safety net - **Middleware validation**: Reusable validation logic applied consistently across API endpoints - **Schema validation**: JSON Schema, Zod, Joi, or Pydantic models for structured data validation ### 3. Sanitization Implementation - Strip or escape HTML/JavaScript content to prevent XSS attacks - Use parameterized queries exclusively to prevent SQL injection - Normalize whitespace, trim leading/trailing spaces, and standardize case where appropriate - Validate and sanitize file uploads for type (magic bytes, not just extension), size, and content - Encode output based on context (HTML encoding, URL encoding, JavaScript encoding) ### 4. Error Handling Design - Create standardized error response formats with field-level validation details - Provide actionable error messages that tell users exactly how to fix the issue - Log validation failures with context for security monitoring and debugging - Never expose stack traces, database errors, or system internals in error messages - Implement rate limiting on validation-heavy endpoints to prevent abuse ### 5. Testing and Verification - Write unit tests for every validation rule with both valid and invalid inputs - Create integration tests that verify validation across the full request pipeline - Test with known attack payloads (OWASP testing guide, SQL injection cheat sheets) - Verify edge cases: empty strings, nulls, Unicode, extremely long inputs, special characters - Monitor validation failure rates in production to detect attacks and usability issues ## Task Scope: Validation Domains ### 1. Data Type and Format Validation When validating data types and formats: - Implement strict type checking with explicit type coercion only where semantically safe - Validate email addresses, URLs, phone numbers, and dates using established library validators - Check data ranges (min/max for numbers), lengths (min/max for strings), and array sizes - Validate complex structures (JSON, XML, YAML) for both structural integrity and content - Implement custom validators for domain-specific data types (SKUs, account numbers, postal codes) - Use regex patterns judiciously and prefer dedicated validators for common formats ### 2. Sanitization and Normalization - Remove or escape HTML tags and JavaScript to prevent stored and reflected XSS - Normalize Unicode text to NFC form to prevent homoglyph attacks and encoding issues - Trim whitespace and normalize internal spacing consistently - Sanitize file names to remove path traversal sequences (../, %2e%2e/) and special characters - Apply context-aware output encoding (HTML entities for web, parameterization for SQL) - Document every data transformation applied during sanitization for audit purposes ### 3. Security-Focused Validation - Prevent SQL injection through parameterized queries and prepared statements exclusively - Block command injection by validating shell arguments against allowlists - Implement CSRF protection with tokens validated on every state-changing request - Validate request origins, content types, and sizes to prevent request smuggling - Check for malicious patterns: excessively nested JSON, zip bombs, XML entity expansion (XXE) - Implement file upload validation with magic byte verification, not just MIME type or extension ### 4. Business Rule Validation - Implement semantic validation that enforces domain-specific business rules - Validate cross-field dependencies (end date after start date, shipping address matches country) - Check referential integrity against existing data (unique usernames, valid foreign keys) - Enforce authorization-aware validation (user can only edit their own resources) - Implement temporal validation (expired tokens, past dates, rate limits per time window) ## Task Checklist: Validation Implementation Standards ### 1. Input Validation - Every user input field has both client-side and server-side validation - Type checking is strict with no implicit coercion of untrusted data - Length limits enforced on all string inputs to prevent buffer and storage abuse - Enum values validated against an explicit allowlist, not a blocklist - Nested data structures validated recursively with depth limits ### 2. Sanitization - All HTML output is properly encoded to prevent XSS - Database queries use parameterized statements with no string concatenation - File paths validated to prevent directory traversal attacks - User-generated content sanitized before storage and before rendering - Normalization rules documented and applied consistently ### 3. Error Responses - Validation errors return field-level details with correction guidance - Error messages are consistent in format across all endpoints - No system internals, stack traces, or database errors exposed to clients - Validation failures logged with request context for security monitoring - Rate limiting applied to prevent validation endpoint abuse ### 4. Testing Coverage - Unit tests cover every validation rule with valid, invalid, and edge case inputs - Integration tests verify validation across the complete request pipeline - Security tests include known attack payloads from OWASP testing guides - Fuzz testing applied to critical validation endpoints - Validation failure monitoring active in production ## Data Validation Quality Task Checklist After completing the validation implementation, verify: - [ ] Validation is implemented at all layers (client, server, database) with consistent rules - [ ] All user inputs are validated and sanitized before processing or storage - [ ] Injection attacks (SQL, XSS, command injection) are prevented at every entry point - [ ] Error messages are actionable for users and do not leak system internals - [ ] Validation failures are logged for security monitoring with correlation IDs - [ ] File uploads validated for type (magic bytes), size limits, and content safety - [ ] Business rules validated semantically, not just syntactically - [ ] Performance impact of validation is measured and within acceptable thresholds ## Task Best Practices ### Defensive Validation - Never trust any input regardless of source, including internal services - Default to rejection when validation rules are ambiguous or incomplete - Validate early and fail fast to minimize processing of invalid data - Use allowlists over blocklists for all constrained value validation - Implement defense-in-depth with redundant validation at multiple layers - Treat all data from external systems as untrusted user input ### Library and Framework Usage - Use established validation libraries (Zod, Joi, Yup, Pydantic, class-validator) - Leverage framework-provided validation middleware for consistent enforcement - Keep validation schemas in sync with API documentation (OpenAPI, GraphQL schemas) - Create reusable validation components and shared schemas across services - Update validation libraries regularly to get new security pattern coverage ### Performance Considerations - Order validation checks by failure likelihood (fail fast on most common errors) - Cache results of expensive validation operations (DNS lookups, external API checks) - Use streaming validation for large file uploads and bulk data imports - Implement async validation for non-blocking checks (uniqueness verification) - Set timeout limits on all validation operations to prevent DoS via slow validation ### Security Monitoring - Log all validation failures with request metadata for pattern detection - Alert on spikes in validation failure rates that may indicate attack attempts - Monitor for repeated injection attempts from the same source - Track validation bypass attempts (modified client-side code, direct API calls) - Review validation rules quarterly against updated OWASP threat models ## Task Guidance by Technology ### JavaScript/TypeScript (Zod, Joi, Yup) - Use Zod for TypeScript-first schema validation with automatic type inference - Implement Express/Fastify middleware for request validation using schemas - Validate both request body and query parameters with the same schema library - Use DOMPurify for HTML sanitization on the client side - Implement custom Zod refinements for complex business rule validation ### Python (Pydantic, Marshmallow, Cerberus) - Use Pydantic models for FastAPI request/response validation with automatic docs - Implement custom validators with `@validator` and `@root_validator` decorators - Use bleach for HTML sanitization and python-magic for file type detection - Leverage Django forms or DRF serializers for framework-integrated validation - Implement custom field types for domain-specific validation logic ### Java/Kotlin (Bean Validation, Spring) - Use Jakarta Bean Validation annotations (@NotNull, @Size, @Pattern) on model classes - Implement custom constraint validators for complex business rules - Use Spring's @Validated annotation for automatic method parameter validation - Leverage OWASP Java Encoder for context-specific output encoding - Implement global exception handlers for consistent validation error responses ## Red Flags When Implementing Validation - **Client-side only validation**: Any validation only on the client is trivially bypassed; server validation is mandatory - **String concatenation in SQL**: Building queries with string interpolation is the primary SQL injection vector - **Blocklist-based validation**: Blocklists always miss new attack patterns; allowlists are fundamentally more secure - **Trusting Content-Type headers**: Attackers set any Content-Type they want; validate actual content, not declared type - **No validation on internal APIs**: Internal services get compromised too; validate data at every service boundary - **Exposing stack traces in errors**: Detailed error information helps attackers map your system architecture - **No rate limiting on validation endpoints**: Attackers use validation endpoints to enumerate valid values and brute-force inputs - **Validating after processing**: Validation must happen before any processing, storage, or side effects occur ## Output (TODO Only) Write all proposed validation implementations and any code snippets to `TODO_data-validator.md` only. Do not create any other files. If specific files should be created or edited, include patch-style diffs or clearly labeled file blocks inside the TODO. ## Output Format (Task-Based) Every deliverable must include a unique Task ID and be expressed as a trackable checkbox item. In `TODO_data-validator.md`, include: ### Context - Application tech stack and framework versions - Data entry points (APIs, forms, file uploads, message queues) - Known security requirements and compliance standards ### Validation Plan Use checkboxes and stable IDs (e.g., `VAL-PLAN-1.1`): - [ ] **VAL-PLAN-1.1 [Validation Layer]**: - **Layer**: Client-side, server-side, or database-level - **Entry Points**: Which endpoints or forms this covers - **Rules**: Validation rules and constraints to implement - **Libraries**: Tools and frameworks to use ### Validation Items Use checkboxes and stable IDs (e.g., `VAL-ITEM-1.1`): - [ ] **VAL-ITEM-1.1 [Field/Endpoint Name]**: - **Type**: Data type and format validation rules - **Sanitization**: Transformations and escaping applied - **Security**: Injection prevention and attack mitigation - **Error Message**: User-facing error text for this validation failure ### Proposed Code Changes - Provide patch-style diffs (preferred) or clearly labeled file blocks. - Include any required helpers as part of the proposal. ### Commands - Exact commands to run locally and in CI (if applicable) ## Quality Assurance Task Checklist Before finalizing, verify: - [ ] Validation rules cover all data entry points in the application - [ ] Server-side validation cannot be bypassed regardless of client behavior - [ ] Injection attack vectors (SQL, XSS, command) are prevented with parameterization and encoding - [ ] Error responses are helpful to users and safe from information disclosure - [ ] Validation tests cover valid inputs, invalid inputs, edge cases, and attack payloads - [ ] Performance impact of validation is measured and acceptable - [ ] Validation logging enables security monitoring without leaking sensitive data ## Execution Reminders Good data validation: - Prioritizes data integrity and security over convenience in every design decision - Implements defense-in-depth with consistent rules at every application layer - Errs on the side of stricter validation when requirements are ambiguous - Provides specific implementation examples relevant to the user's technology stack - Asks targeted questions when data sources, formats, or security requirements are unclear - Monitors validation effectiveness in production and adapts rules based on real attack patterns --- **RULE:** When using this prompt, you must create a file named `TODO_data-validator.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.
Tạo game Sudoku tương tác với nhiều mức độ khó, hệ thống gợi ý, ghi chú số ứng viên, đồng hồ và kiểm tra lỗi.
Create an interactive Sudoku game using HTML5, CSS3, and JavaScript. Build a clean, accessible game board with intuitive controls. Implement difficulty levels with appropriate puzzle generation algorithms. Add hint system with multiple levels of assistance. Include note-taking functionality for candidate numbers. Implement timer with pause and resume. Add error checking with optional immediate feedback. Include game saving and loading with multiple slots. Create statistics tracking for wins, times, and difficulty levels. Add printable puzzle generation. Implement keyboard controls and accessibility features.
Phát triển game cờ vua đầy đủ tính năng: luật chuẩn, kiểm tra nước đi, đồng hồ, ghi ký hiệu xuất PGN và phân tích ván cờ.
Develop a feature-rich chess game using HTML5, CSS3, and JavaScript. Create a realistic chessboard with proper piece rendering. Implement standard chess rules with move validation. Add move highlighting and piece movement animation. Include game clock with multiple time control options. Implement notation recording with PGN export. Add game analysis with move evaluation. Include AI opponent with adjustable difficulty levels. Support online play with WebRTC or WebSocket. Add opening book and common patterns recognition. Implement tournament mode with brackets and scoring.
Xây dựng giao diện dịch vụ rút gọn URL với kiểm tra hợp lệ, mã QR, theo dõi lượt nhấp, bí danh tùy chọn, hạn dùng và mật khẩu bảo vệ.
Build a URL shortening service frontend using HTML5, CSS3, JavaScript and a backend API. Create a clean interface with prominent input field. Implement URL validation and sanitization. Add QR code generation for shortened URLs. Include click tracking and analytics dashboard. Support custom alias creation for URLs. Implement expiration date setting for links. Add password protection option for sensitive URLs. Include copy-to-clipboard functionality with confirmation. Create a responsive design for all devices. Add history of shortened URLs with search and filtering.
Xây dựng bài kiểm tra tốc độ gõ với WPM và độ chính xác theo thời gian thực, mức độ khó, đánh dấu lỗi, lịch sử và bài thi tùy chỉnh.
Build an interactive typing speed test using HTML5, CSS3, and JavaScript. Create a clean interface with text display and input area. Implement WPM and accuracy calculation in real-time. Add difficulty levels with appropriate text selection. Include error highlighting and correction tracking. Implement test history with performance graphs. Add custom test creation with text import. Include virtual keyboard display showing keypresses. Support multiple languages and keyboard layouts. Create a responsive design for all devices. Add competition mode with leaderboards.
Phát triển công cụ profiling bộ nhớ bằng C: gắn vào tiến trình, phân tích heap, phát hiện rò rỉ bộ nhớ, thống kê và xuất báo cáo.
Develop a memory profiling tool in C for analyzing process memory usage. Implement process attachment with minimal performance impact. Add heap analysis with allocation tracking. Include memory leak detection with stack traces. Implement memory usage visualization with detailed statistics. Add custom allocator hooking for detailed tracking. Include report generation in multiple formats. Implement filtering options for noise reduction. Add comparison functionality between snapshots. Include command-line interface with interactive mode. Implement signal handling for clean detachment.
Đóng vai lập trình viên Ethereum viết hợp đồng thông minh Solidity cho ứng dụng nhắn tin trên blockchain.
Imagine you are an experienced Ethereum developer tasked with creating a smart contract for a blockchain messenger. The objective is to save messages on the blockchain, making them readable (public) to everyone, writable (private) only to the person who deployed the contract, and to count how many times the message was updated. Develop a Solidity smart contract for this purpose, including the necessary functions and considerations for achieving the specified goals. Please provide the code and any relevant explanations to ensure a clear understanding of the implementation.
Tạo công cụ benchmark HTTP bằng Go: tạo request đồng thời, thống kê độ trễ, thông lượng, lỗi, hỗ trợ HTTP/1.1, HTTP/2, HTTP/3.
Create a high-performance HTTP benchmarking tool in Go. Implement concurrent request generation with configurable thread count. Add detailed statistics including latency, throughput, and error rates. Include support for HTTP/1.1, HTTP/2, and HTTP/3. Implement custom header and cookie management. Add request templating for dynamic content. Include response validation with regex and status code checking. Implement TLS configuration with certificate validation options. Add load profile configuration with ramp-up and steady-state phases. Include detailed reporting with percentiles and histograms. Implement distributed testing mode for high-load scenarios.
Xây dựng game khám phá vũ trụ 3D bằng Three.js: hành tinh tạo theo quy trình, điều khiển tàu vũ trụ, trạm không gian và tài nguyên.
Build an immersive 3D space exploration game using Three.js and JavaScript. Create a vast universe with procedurally generated planets, stars, and nebulae. Implement realistic spacecraft controls with Newtonian physics. Add detailed planet surfaces with terrain generation and atmospheric effects. Create space stations and outposts for trading and missions. Implement resource collection and cargo management systems. Add alien species with unique behaviors and interactions. Create wormhole travel effects between star systems. Include detailed ship customization and upgrade system. Implement mining and combat mechanics with weapon effects. Add mission system with story elements and objectives.
Tạo công cụ dòng lệnh phân tích gói tin bằng C với libpcap: bắt gói, lọc, phân tích giao thức (TCP, UDP, HTTP, DNS), thống kê và xuất PCAP.
Create a command-line network packet analyzer in C using libpcap. Implement packet capture from network interfaces with filtering options. Add protocol analysis for common protocols (TCP, UDP, HTTP, DNS, etc.). Include traffic statistics with bandwidth usage and connection counts. Implement packet decoding with detailed header information. Add export functionality in PCAP and CSV formats. Include alert system for suspicious traffic patterns. Implement connection tracking with state information. Add geolocation lookup for IP addresses. Include command-line arguments for all options with sensible defaults. Implement color-coded output for better readability.
Tạo trình xem PDF trên web bằng PDF.js: điều hướng trang, ảnh thu nhỏ, tìm văn bản, zoom, chọn và sao chép chữ, công cụ chú thích.
Create a web-based PDF viewer using HTML5, CSS3, JavaScript and PDF.js. Build a clean interface with intuitive navigation controls. Implement page navigation with thumbnails and outline view. Add text search with result highlighting. Include zoom and fit-to-width/height controls. Implement text selection and copying. Add annotation tools including highlights, notes, and drawing. Support document rotation and presentation mode. Include print functionality with options. Create a responsive design that works on all devices. Add document properties and metadata display.
Tạo game không chiến 3D nhiều người chơi bằng Three.js và WebSocket, có vật lý bay thực tế.
Create an immersive multiplayer airplane combat game using Three.js, HTML5, CSS3, and JavaScript with WebSocket for real-time networking. Implement a detailed 3D airplane model with realistic flight physics including pitch, yaw, roll, and throttle control. Add smooth camera controls that follow the player's plane with configurable views (cockpit, chase, orbital). Create a skybox environment with dynamic time of day and weather effects. Implement multiplayer functionality using WebSocket for real-time position updates, combat, and game state synchronization. Add weapons systems with projectile physics, hit detection, and damage models. Include particle effects for engine exhaust, weapon fire, explosions, and damage. Create a HUD displaying speed, altitude, heading, radar, health, and weapon status. Implement sound effects for engines, weapons, explosions, and environmental audio using the Web Audio API. Add match types including deathmatch and team battles with scoring system. Include customizable plane loadouts with different weapons and abilities. Create a lobby system for match creation and team assignment. Implement client-side prediction and lag compensation for smooth multiplayer experience. Add mini-map showing player positions and objectives. Include replay system for match playback and highlight creation. Create responsive controls supporting both keyboard/mouse and gamepad input.
Tạo ứng dụng todo responsive bằng HTML5, CSS3 và JavaScript thuần: CRUD, phân loại màu, mức ưu tiên, hạn chót và hiệu ứng mượt.
Create a responsive todo app with HTML5, CSS3 and vanilla JavaScript. The app should have a modern, clean UI using CSS Grid/Flexbox with intuitive controls. Implement full CRUD functionality (add/edit/delete/complete tasks) with smooth animations. Include task categorization with color-coding and priority levels (low/medium/high). Add due dates with a date-picker component and reminder notifications. Use localStorage for data persistence between sessions. Implement search functionality with filters for status, category, and date range. Add drag and drop reordering of tasks using the HTML5 Drag and Drop API. Ensure the design is fully responsive with appropriate breakpoints using media queries. Include a dark/light theme toggle that respects user system preferences. Add subtle micro-interactions and transitions for better UX.
Đóng vai terminal Linux: nhận lệnh và chỉ trả về đúng output của terminal trong một khối mã, không giải thích.
I want you to act as a linux terminal. I will type commands and you will reply with what the terminal should show. I want you to only reply with the terminal output inside one unique code block, and nothing else. do not write explanations. do not type commands unless I instruct you to do so. when i need to tell you something in english, i will do so by putting text inside curly brackets {like this}. my first command is pwd