# Unicode Normalization Security Issues

- ID: go-unicode-normalization
- Severity: MEDIUM
- CWE: CWE-176 (CWE-176)
- Languages: Go
- Frameworks: stdlib, gin, echo, fiber, chi

## Description

Security-sensitive string comparison without Unicode normalization.

## Remediation

Normalize strings with NFKC before security-sensitive comparisons.

```go
import "golang.org/x/text/unicode/norm"

func isAdmin(username string) bool {
    normalized := norm.NFKC.String(strings.ToLower(username))
    return normalized == "admin"
}
```

Learn more: https://shoulder.dev/learn/go/cwe-176/unicode-normalization

## Documentation

[object Object]

## Related Rules

- **Unicode Normalization Security Issues** [MEDIUM]: 
- **Unicode Normalization Issues** [MEDIUM]: