teleren/devto huggingface dataset:
How To Enable Real-Time Merge Conflict Detection In PyCharm
Tags: webdev, programming, git, tutorial
Published: 2021-09-23 13:22:39

Ah, the dreaded resolve conflicts popup. You've finished crafting the perfect code, just a quick merge in of master (ahem, main) before you submit your PR, and then... 💥

![img-1-scaled.png](https://cdn.hashnode.com/res/hashnode/image/upload/v1632213847061/hH7A9HisQ.png)

If only there was an early warning system for merge conflicts so you could be better prepared or even avoid the conflicts in the first place I hear you say? Well if you are a PyCharm user today is your lucky day!

Firstly, you'll need to install and set up [GitLive](https://plugins.jetbrains.com/plugin/11955-gitlive). Then if you right click the gutter on PyCharm, you will see the option to “Show Other's Changes”.

![img-2-scaled.png](https://cdn.hashnode.com/res/hashnode/image/upload/v1632213888884/r9d3Htb6c.png)

It will be disabled if the file open in the editor is not from git or there are no other changes to it from contributors working on other branches (aka you are safe from conflicts). If it's enabled there will be one or more change indicators in the gutter of the editor.


![image-3-scaled.png](https://cdn.hashnode.com/res/hashnode/image/upload/v1632216789242/xha1qtf-h.png)


These will show you where your teammates have made changes compared to your version of the file and even update in real-time as you and your teammates are editing.

![key indicators-dark.png](https://cdn.hashnode.com/res/hashnode/image/upload/v1632213899673/wr0LvxtSi.png)


If you've made a conflicting change you will see the bright red conflict indicator. These conflicts can be uncommitted local changes you have not pushed yet or existing changes on your branch that conflict with your teammates’ changes.

Click your teammate’s icon in the gutter to see the diff between your version and theirs, the branch the offending changes are from, and the issue connected to that branch if there is one.

![img-5-scaled.png](https://cdn.hashnode.com/res/hashnode/image/upload/v1632214614303/behcC17Np.png)


From this popup you can also cherry-pick your teammate’s change directly from their local version of the file. For simple conflicts this can be a quick way to resolve them as identical changes on different branches will merge cleanly.

Unfortunately, it's not always possible to resolve a conflict straight away but with the early warning, you'll be better prepared, avoiding any nasty surprises at merge time!

Check out [this blog post](https://blog.git.live/gitlive-11.0-Real-time-merge-conflict-detection) or the [GitLive docs](https://docs.git.live/docs/mergeconflicts/) if you want to learn more.
Introducing ONA - An Open Source App for WordPress Blogs and News Sites.
Tags: reactnative, android, wordpress, apps
Published: 2021-09-23 13:13:52

ONA or Open News App is an open source React Native based application for WordPress News and Blog Websites.
The app is available on Github: [Click here](https://github.com/vikasbukhari/ONA-OPENNEWSAPP)
Main Features

## Features

* React Native Based
* Clean and Elegent UI
* Firebase Push Notifications
* WordPress REST API
* Separate Categories Section.
* External Links to privacy and other pages.


![](https://miro.medium.com/max/700/1*wY2kGWl2YbFA41qtSBb7uQ.png)

## React Native Based & Clean User Interface
![](https://miro.medium.com/max/700/1*P3ib-wBsUDNdpZy_-a10qQ.png)

## Firebase Push Notifications
![](https://miro.medium.com/max/700/1*UjDavl73xWjSCemSuPtXLA.png)

## Separate Categories Section.
![](https://miro.medium.com/max/700/1*79HFwP0kazBXCDThv6NaXw.png)

## Lottie Animations & Lazy loading , Pull to Refresh.

![](https://miro.medium.com/max/700/1*LlaXACH8ldMIqG9295wMsA.png)



The complete installation guide is available on the Github page of app. [Click here To View](https://github.com/vikasbukhari/ONA-OPENNEWSAPP)
CWE-78
Tags: appsec, applicationsecurity, softwaresecurity, cybersecurity
Published: 2021-10-19 22:52:25

---
title: CWE-78
published: true
date: 2021-09-23 13:02:49 UTC
tags: appsec,applicationsecurity,softwaresecurity,cybersecurity
canonical_url: https://blog.shiftleft.io/cwe-78-f49b2427626b
---

#### Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’)

![](https://cdn-images-1.medium.com/max/640/1*pVUOcacmGNy475iUEz0dKA.jpeg)

OS command injection occurs when the application uses user input (which isn’t escaped or sanitized) as part of a command that’s run against the host’s operating system.

### Why OS command injection vulnerabilities are problematic

Typically, end-users would not have access to the host operating system. Still, OS command injection allows malicious parties to bypass this limitation and execute commands directly against the operating system. The attacker would therefore have access to sensitive aspects of the application, granting them the ability to perform actions that may compromise the integrity of the application.

### How OS command injection vulnerabilities occur

OS command injection vulnerabilities occur when users are allowed to provide input. The input provided (without sanitization or validation) is then used to build a command executed on the host operating system. The user input could be used as an argument to a program that’s supposed to run on the operating system or select a program to be run on the host.

### Mitigating OS command injection vulnerabilities

To reduce exposure to OS Command injection vulnerabilities:

- Use library calls, rather than external processes, to implement the functionality needed
- Avoid running commands against the operating system if they’re built with user-supplied input
- Implement server-side checks on user-supplied input before using
- Implement an allowlist and escape/filter anything that doesn’t match
- Create a mapping of allowed inputs against which user-input is matched

### TL;DR

- CWE-78 vulnerabilities occur when unsanitized/unescaped user input is used as part of a command run against the operating system or used to launch applications,
- OS injection vulnerabilities can be a way for malicious parties to bypass security controls to manipulate the server’s operating system and can be very dangerous.

* * *
Oops Major Broker Broken
Tags: errors, debug, programming, customers
Published: 2021-09-23 12:57:25

![Please wait forever](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/cr7wc32ayxbtihbevxst.gif)

All applications have mistakes in them. If you have not found them, you have not looked in the right places.

Yesterday my wife and I tried opening an account with a major online broker. You've heard of them. The interface popped up a spinner half-way through the signup and that **spinner never went away**.

We tried different browsers and different computers. Same result.

She called their support number. Brandon (not his real name) helped her try several things. Nothing worked.

Eventually, he went looking for a developer. This was later in the afternoon --- but he found one. Let's call him Jack (not his real name).

## Root cause?

While she was doing that, I pulled up the website on my computer and recreated the endless spinner issue. I opened the developer console in chrome. *There it was --- in red text; something "address1" on a null object.*

I told Jack and he knew right away what the cause was. Seemed we ran into an edge case but because the message said "address1" he knew where to look in their database and quickly realized their code assumed an entry would exist, which for us did not.

He promised to fix it that evening and we are pretty happy.

## Moral of the incident? 

Bugs happen -- [so leave some breadcrumbs to the root cause](https://dev.to/frankfont/look-professionally-lla). People end up happier that way.
Lắp đặt camera Biên Hòa
Tags: duchuygroup
Published: 2021-09-23 12:28:35

Với trang thiết bị hiện đại, cùng mang quản lý cung ứng  chuyên nghiệp,đội ngũ nhân viên đầy sáng tạo, năng động, chịu khó, tận tình và phong cách khiến việc chuyên nghiệp, cam kết mang tới cho quý khách các sản phẩm chất lượng cao, giá thành tối ưu nhằm đáp ứng bắt buộc và nhu cầu khác nhau của khách hàng.

![camera thân nhiệt](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/lb7wt9dz1zgykyhnmuqk.jpg)
Thế mạnh làm cho bắt buộc thương hiệu Camera Biên Hòa biệt chính là: Sự chuyên môn hóa trong từng bộ phận, tính nghĩa vụ cao cộng những giám sát công nghệ làm việc nghiêm túc, kỹ càng nhằm tạo cần những sản phẩm hoàn thiện đến từng yếu tố nhỏ nhất. Ngoài ra, các phòng ban thường xuyên trao đổi công việc, san sớt những khó khăn, sáng kiến xây dựng nên một Camera Đồng Nai năng động, sáng tạo, giỏi hơn trong từng dự án chúng tôi tham gia.

Với phương châm “ Hợp tác để cộng thành công”, và định hướng “Liên tục cải tiến” Camera Biên Hòa đã luôn cố gắng cả về nhân lực, vật lực, xây dựng uy tín thương hiệu, niềm tin mang người mua mang các sản phẩm chúng tôi cung cấp.

Không ngừng lại ở đó, camera biên hòa luôn nỗ lực, mua tòi, học hỏi và sáng tạo hơn nữa để càng ngày càng hoàn thiện và phát triển một cách vẹn toàn nhất. Camera biên hòa hướng tới việc trở thành 1 nhà hàng hàng đầu Việt Nam trong lĩnh vực phân phối và lắp đặt hệ thống những thứ an ninh.
![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/03zamzjzj3uaxn9hfxi6.jpg)

Sự tin tưởng và ủng hộ của người dùng trong suốt thời gian qua là nguồn cổ vũ lớn to trên bước đường tăng trưởng của Camera Biên Hòa. Chúng tôi xin hứa hẹn sẽ ko dừng hoàn thiện, phục vụ các bạn tốt nhất để luôn xứng đáng với niềm tin ấy.”
>> Nguồn(source) : 
[lắp đặt camera biên hòa](https://duchuygroup.com/lap-dat-camera-tai-bien-hoa-loai-camera-nao-gia-re/)
Nonton Anime Sub Indo
Tags: nontonanime, animesubindo, animesubindonesia
Published: 2021-09-23 12:28:00

Nonton anime sub Indo dapat menyediakan bahan hiburan yang menarik untuk para penggemar anime, paling utama bagi yang kurang nyaman dengan subtitle bahasa Inggris. Menonton anime bukan cuma buat kanak-kanak saja. Kenyataannya, banyak golongan yang menggemari serial animasi dari Negara Sakura yang satu ini.

Banyak tempat anime yang dapat kalian kunjungi, namun tidak seluruhnya sediakan subtitle Bahasa Indonesia buat membuat pengalaman nonton jadi lebih mengasyikkan. Buat kamu yang menyukai menonton serial anime, tentu saja bakal setia buat menunggu perilisan anime baru setiap minggunya yang bisa di tonton lansung secara streaming.

Nonton Anime Sub Indo

Bagi kamu yang ingin menonton Anime secara online tetapi tidak tahu dimana tempat untuk menontonnya, tidak usah bingung. Saat ini, kamu bisa streaming nonton anime favoritmu di internet. Ditambah lagi sudah tersedia dengan subtitle Indonesia.
Kalian yang ingin tahu di situs mana saja yang dapat menonton anime subtitle indo secara online ataupun situs Nonton Anime Sub Indo serta download anime sub Indo di Tomanime, kamu dapat mengecek saran situs nonton anime terbaik tanpa iklan. Rasanya kurang lengkap jika Kamu tidak menonton anime favorit dalam bentuk visual. Kamu dapat juga menonton anime sub indo secara online pada situs yang menyediakan streaming anime.

Streaming Anime Sub Indo

Tidak hanya situs seperti streaming anime yang lain, saat ini juga sudah tersedia aplikasi buat nonton anime Indo terlengkap serta berbagai macam resolusi. Mulai dari dengan resolusi HD 1080p dan 720p sampai dengan resolusi SD yang tentunya kualitas anime tersebut sangat menarik untuk di tonton oleh para pecinta anime akses karena menggunakan premium proxy streaming.

Tentu saja layanan nonton anime subtitle indonesia bebas dari iklan pop up yang mengganggu kenyamanan penonton pada saat menonton anime kesukaan nya. Kalian juga bisa melakukan download anime sub indo dan nonton anime subtitle indonesia kapanpun dan dimanapun. Tomanime juga menyediakan serial anime-anime populer, seperti untuk nonton Boruto, One Piece, Tensura, hingga Tokyo Revenger.

Source : https://tomanime.com/
JavaScript split string - String into substrings
Tags: javascript, tutorial, beginners
Published: 2021-09-23 12:03:31

In this tutorial, we look at how to use JavaScript to split strings. We break down the syntax, parameters to facilitate further understanding.

This tutorial is a part of our initiative at [Flexiple](https://flexiple.com/), to write short curated tutorials around often used or interesting concepts.

### Table of Contents
- [JavaScript split string](#javascript-split-string)
- [Code and explanation](#code-and-explanation)
- [Closing thoughts](#closing-thoughts-javascript-split-string)

## JavaScript split string:
The JavaScript split() string method is used to split a string into an array of substrings. Once split it returns an array containing a substring. However, the split() method does not change the original string.

In order to specify where the string needs to be split, a separator is used. Javascript splits the string on each occurrence of the separator. This way a string can be easily split into substrings.

## Code and Explanation:
The code to split a string in is fairly straightforward, let's take a look:
### Syntax:
```javascript
string.split(separator, limit)
```
Here “string” refers to the string you are looking to split. The other terms are parameters we take a look at below.
### Parameters:
- Separator - Optional. A specific character, regular expression used to split a string. If not passed, the entire string would be returned.
- Limit - Optional. An integer that specifies the number of splits. Subsequent occurrences of the separator are not included.

### Return Value:
It returns an array containing the substrings. If a separator is not passed, the array will contain one element containing the entire string.

### JavaScript split string code:
```javascript
let Flexiple = 'Hire top freelance developers'
let week = 'Monday,Tuesday,Wednesday,Thursday,Friday,Saturday,Sunday'

let flexiplelist = Flexiple.split(" ")
let weeklist = week.split(",")
let flexiplelist2 = Flexiple.split()
let weeklist2 = week.split(",",3)

console.log(weeklist)
console.log(flexiplelist)
console.log(flexiplelist2)
console.log(weeklist2)
```
As you can see we have defined two strings, the first one is separated by a space and the next string is separated by a comma.

The output for the above code is:
```javascript
> Array ["Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday"]
> Array ["Hire", "top", "freelance", "developers"]
> Array ["Hire top freelance developers"]
> Array ["Monday", "Tuesday", "Wednesday"]
```
For the first two arrays, we have used their respective separators.

For the third array, we have not passed a separator and hence the array contains one element containing the entire string.

And for the final array, we have passed a limit and hence only 3 substrings are returned.

## Closing thoughts - JavaScript split string
This method is useful when trying to split a string based on a pattern. However, in case you wish to split it based on an index you can use the slice methods.

You could refer to this in-depth tutorial - [JavaScript Slice](https://flexiple.com/javascript-slice/).
A Nice Developer Joke For Today
Tags: jokes, dailydeveloperjokes
Published: 2021-09-23 12:00:08

---
title: "A Nice Developer Joke For Today"
description: "Check out today's daily developer joke! (a project by Fred Adams at xtrp.io)"
series: "Daily Developer Jokes"
published: true
tags: #jokes, #dailydeveloperjokes
---

Hi there! Here's today's Daily Developer Joke. We hope you enjoy it; it's a good one.

![Joke Image](https://private.xtrp.io/projects/DailyDeveloperJokes/public_image_server/images/5e1259a37a785.png)

---

For more jokes, and to submit your own joke to get featured, check out the [Daily Developer Jokes Website](https://dailydeveloperjokes.github.io/). We're also open sourced, so feel free to view [our GitHub Profile](https://github.com/dailydeveloperjokes).

### Leave this post a ❤️ if you liked today's joke, and stay tuned for tomorrow's joke too!

_This joke comes from [Dad-Jokes GitHub Repo by Wes Bos](https://github.com/wesbos/dad-jokes) (thank you!), whose owner has given me permission to use this joke with credit._

<!--
Joke text:
A new database query walks into a bar.

The server says "Sorry, cache only."
 -->
Show Custom Lat/Long Location using Google Map API
Tags: laravel, javascript, webdev, programming
Published: 2021-09-23 11:59:52

Today, I am assigned a task from my today work (Jira).
That was I have to query available shop location and nearby rider location from database and show them on a map with its own information. 

For this, I used google map api. The host application is used Laravel and yes, JavaScript is a must to involve in this case.

I won't tell you all my process coz it'll be boring and long. 
So, I'm going to tell you only basic steps you can follow.

First step, 
1. Go to google developer console and get an api key.
https://developers.google.com/maps/documentation/javascript/get-api-key

2. add div tag in your blade template.
 map data will be render into that document using that id (map).
```javascript
   <div id="map"></div>
```

3. import google map script tag.
You've got api key from step 1 right?.
Add that api key to {your_api_key} place.
'myMap' will be the callback function name that we'll add later.
```javascript
   <script src="https://maps.googleapis.com/maps/api/js?key={your_api_key}&callback=myMap"></script>
```

4. Add myMap function.
In this case, we add a pair of lat/long location as center and marker on map. In order to show on map, we render on map data on our div using document.getElementById('map'). It has a lot of cool features google.maps so if you are interested to test, you can do more research on this.
```javascript
  function myMap() {

            var center = {lat: 16.81265991142744, lng: 96.12810673385788};
            var map = new google.maps.Map(document.getElementById('map'), {
                zoom: 12,
                center: center
            });
            let marker =new google.maps.Marker({
                 position: {lat: 16.81265991142744, lng: 96.12810673385788},
                map: map,
              icon: 'http://maps.google.com/mapfiles/ms/icons/green-dot.png'
             });
    }
```

Yeah, you can test with multiple locations and markers and so on. That'll be pretty fun.

Thanks for your time. 
See you on another blog.
Collaborating with other developers on GitHub
Tags: markdown, opensource
Published: 2021-09-23 11:44:33

## Introduction ##
My second lab using open-source development. I can say it has been going great. I was able to find a contributor to work with on each other's code. I knew this lab was not about developing my code. Instead, working on someone else's code. Also, to avoid any discrepancy in code, trying to maintain the original style.

## Contribution to someone's project
I started working on [Alex's code] (https://github.com/sirinoks/SSGNode/). I found it clear with instructions on how to use node.js. I made the issue work by adding a feature to support markdown files to generate HTML files. Now, the original code forked to my Github account. I created the issue-8 branch and started working on developing the code to support MD files.  I choose many features for Md files to support as # heading #, *italics* and **bold**.
[PR#18](https://github.com/sirinoks/SSGNode/pull/18)

## Testing
Well, I tested the code on an online compiler and also on my local computer. I wanted to review the code before making the pull request. So, I had to take a lot of tests. Well, once i created pull request. It was responsibility of owner to review changes and provide green flag to merge pull request. However, there were some minor changes to pull requests.

## Contribution on my project
[PR#12](https://github.com/japneetsingh035/ModernSSG/pull/12)
My Project got submission by Alex. Contributor added the feature to support md files. The feature also included the use of italic tag being converted to html. Despite of never working with swift. Contributor was able to understand my code and make necessary changes. There were some issues as swift was not running on windows due to some path issues which will be resolved in the near future. In the end, we merged the pull requests with a lot of testing and reviewing.

# Conclusion
This lab helped me to learn about working on someone else's repo. Step by step firstly, forking and cloning other projects. Then, creating branches to work on new features and fix bugs. Also, working on code you didn't write, trying to maintain the original style and not break things. I also worked with new language and with Markdown. Most importantly, creating pull requests and collaborating with other developers on GitHub.
What’s new in Flutter 2.5
Tags: flutter, mobile, ios, ionic
Published: 2021-09-23 11:29:28

The initial release of Flutter in 2017 spelled the beginning of a new era in the hybrid development of cross-platform apps released by Google. 

Flutter took the world by storm and, within a few years, countless companies and developers adopted Flutter as their platform and framework of choice for developing cross-platform applications.  Because Flutter enables you to develop mobile (Android and iOS), desktop, and, as of the release of Flutter 2.0, even web apps without changing their codebase or rewriting the apps from scratch.

The latest release of this rapidly evolving framework, Flutter 2.5, packs a whole new, even more, powerful punch. Flutter 2.5 was announced as stable on September 8. Installation instructions can be found at flutter. dev. Also in Flutter 2.5:
1. Performance Improvements
2. Android full-screen support
3. Apple Silicon support
4. Dart formatter and cascades
5. Pub support for ignoring files using.pubignore
6. The pub is much smarter and faster
7. ListView now sends notifications of scrollable areas even 
   if the user isn’t scrolling
8. Flutter DevTools utilizes these events to assist you with 
   diagnosing shader compilation jank in your application
   Material banner supports now to the ScaffoldMessenger 
9. New CPU Profiler highlight that empowers you to hide 
   profiler data from any of these sources.
10. This release of DevTools accompanies an update to the 
   Widget Inspector that permits you to hover over a widget 
   to assess the object, view properties, widget state, etc.
11. To make DevTools a more useful destination for comprehension and debugging your Flutter applications.
12. We can add dependencies without leave the VS Code now
The Visual Studio Code test runner also adds new gutter icons showing the last state of a test that can be clicked to run the test.


#How to upgrade to Flutter 2.5

You can upgrade your Flutter version to v2.5 by running the following command:

`flutter upgrade`


The Flutter CLI tool will do its work to upgrade your Flutter SDK to the latest version 2.5.
To verify that the upgrade is successful, run the following command:

`flutter --version`

Flutter 2.5.0 • channel stable • https://github.com/flutter/flutter.git
Framework • revision 4cc385b4b8 (5 days ago) • 2021-09-23 23:01:49 -0700
Engine • revision f0826da7ef
Tools • Dart 2.14.0