Path Equivalence: Windows 8.3 Filename

Windows maintains backward compatibility by automatically generating a short 8.3 filename (like 'DOCUME~1.TXT') for files with longer names. This creates two distinct paths to the same file. If your access control checks only validate the long filename, attackers can simply use the equivalent short name to bypass your restrictions. This is a classic path equivalence flaw where the system sees 'LONGFILENAME.DOC' and 'LONGFI~1.DOC' as different strings, even though they point to the same underlying resource. Developers must normalize and validate both naming formats in their security logic to close this gap.