Input Validation Pipeline (2D)

This 2D companion drives the same defense-in-depth idea as the 3D pipeline through a plain canvas view built for reading the validation logic rather than orbiting a scene. Real SQL-injection fragments, XSS fragments, oversized strings and null-byte tricks are drawn from an actual payload pool and flow left to right through four genuinely evaluating stages — a length check, an allow-list charset check, a character-class/keyword scan, and an encoding-normalization check that re-validates the payload after percent-decoding it. Toggle any stage off, drag the max-length threshold or the malicious-injection-rate slider, and watch the live per-stage catch-rate breakdown change in real time.