DEPRECATED: Improper Sanitization of Custom Special Characters

Deprecated Base
Structure: Simple
Description

This deprecated entry originally flagged issues where custom or non-standard special characters weren't properly sanitized. It has been consolidated into the more comprehensive CWE-75: Failure to Sanitize Special Elements.

Extended Description

This weakness was retired because it represented a specific example of a broader security problem. The original PLOVER taxonomy sometimes created narrow categories like this for completeness, but for effective vulnerability mapping, CWE now uses more general, flexible entries that better capture the root cause. Developers should now reference CWE-75, which covers the failure to properly neutralize any special elements before use, including custom delimiters, escape sequences, or application-specific markup. This consolidation makes it easier to map real-world vulnerabilities and apply consistent defensive coding practices against injection-style attacks.