Inputs should be decoded and canonicalized to the application's current internal
representation before being validated (CWE-180). Make sure that the application does
not decode the same input twice (CWE-174). Such errors could be used to bypass
whitelist validation schemes by introducing dangerous inputs after they have been