TRB-085v1.0.0 · normalization_metacharacter_introduced

Normalization metacharacter introduced

Normalization metacharacter introduced identifies the same representation can acquire different meaning across decoding or parsing boundaries.

CWE mapping

parser differential

The analyzer verified the reported property directly from the supplied input.

Conditional: Operational impact can still depend on where and how this value is used.

Displayed as text only. tryb does not execute this example.

[inert example for normalization_metacharacter_introduced]

normalize-before-validate. Validation and interpretation should consume the same normalized representation.

Verify: Normalize once at the boundary, validate that value, and test the exact destination behavior.

Compare the finding with the destination system's validation and trust policy.