TRB-083v1.0.0 · normalization_compatibility_change

Normalization compatibility change

Normalization compatibility change identifies the same representation can acquire different meaning across decoding or parsing boundaries.

CWE mapping

parser differential

The analyzer verified the reported property directly from the supplied input.

Conditional: Operational impact can still depend on where and how this value is used.

Displayed as text only. tryb does not execute this example.

[inert example for normalization_compatibility_change]

normalize-before-validate. Validation and interpretation should consume the same normalized representation.

Verify: Normalize once at the boundary, validate that value, and test the exact destination behavior.

Compare the finding with the destination system's validation and trust policy.