TRB-084v1.0.0 · normalization_idna_change
Normalization idna change
Normalization idna change identifies the same representation can acquire different meaning across decoding or parsing boundaries.
CWE mapping
CWE-436parser differential
Assurance
The analyzer verified the reported property directly from the supplied input.
Conditional: Operational impact can still depend on where and how this value is used.
Inert example
Displayed as text only. tryb does not execute this example.
[inert example for normalization_idna_change]Remediation
normalize-before-validate. Validation and interpretation should consume the same normalized representation.
Verify: Normalize once at the boundary, validate that value, and test the exact destination behavior.
What to verify next
Compare the finding with the destination system's validation and trust policy.