encoding-bypass-anti-pattern

What problem does it solve?

This Skill addresses vulnerabilities where attackers bypass security controls by using different encodings for malicious input, leading to code execution or data breaches.

Core Features & Use Cases

• Detects Validation Before Normalization: Identifies flaws where security checks are performed on encoded data before it's decoded or normalized.
• Prevents Encoding Bypass: Provides secure examples and remediation steps to ensure data is validated only after being brought to its canonical form.
• Use Case: Reviewing web application code to ensure that user-supplied file paths or search queries are properly decoded and validated to prevent path traversal or injection attacks.

Quick Start

Review the provided Python code snippet for potential encoding bypass vulnerabilities.