CWE-179 (不正确的行为次序：过早验证) — Vulnerability Class 4

CWE-179, Incorrect Behavior Order: Early Validation, is a logic flaw where software checks input integrity before applying necessary sanitization or canonicalization processes. This sequencing error allows attackers to bypass security controls by submitting malicious payloads that appear valid initially but become dangerous only after transformation. For instance, an attacker might inject encoded characters that pass early validation but decode into harmful commands during subsequent processing. To mitigate this risk, developers must ensure validation occurs strictly after all input modifications, such as decoding, normalization, and cleansing, are complete. By establishing a strict processing order where sanitization precedes validation, organizations can guarantee that the data being checked is in its final, safe form, thereby preventing evasion techniques that rely on the temporal gap between input receipt and security enforcement.