Normalizing User Input Securely: Best Practices
Secure Coding Practices explains why secure input normalization should happen before validation and security checks. Untrusted data needs a consistent internal form first. If validation runs too early, later decoding or canonicalization may reveal content that bypassed those checks. So…