Category Understanding Input Canonicalization

What is canonicalization security risk? It happens when an application checks one form of data but later processes another form of the same input. CWE-180 covers cases where validation happens before canonicalization, which can leave gaps attackers may exploit to…