Path Normalization

The process of converting a request path to a single canonical form by decoding encoded characters, folding case where applicable, and collapsing redundant separators and traversal sequences. Making security decisions on the normalized path, rather than the raw input, closes the gap that encoding-based evasions exploit.