The software validates input before it is canonicalized, which
prevents the software from detecting data that becomes invalid after the
canonicalization step.
The software validates data before it has been filtered, which
prevents the software from detecting data that becomes invalid after the
filtering step.
The software performs a comparison that only examines a portion
of a factor before determining whether there is a match, such as a substring,
leading to resultant weaknesses.