Category Testing for canonicalization vulnerabilities methods