nfd and nfkd are considered

Author: Sim4n6

ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll

@@ -50,7 +50,7 @@ class Configuration extends TaintTracking::Configuration {
   override predicate isSink(DataFlow::Node sink, DataFlow::FlowState state) {
     exists(DataFlow::CallNode cn |
       cn.getMethodName() = "unicode_normalize" and
-      cn.getArgument(0).getConstantValue().getSymbol() = [":nfkc", ":nfc"] and
+      cn.getArgument(0).getConstantValue().getSymbol() = [":nfkc", ":nfc", ":nfkd", ":nfd"] and
       sink = cn.getReceiver()
     ) and
     state instanceof PostValidation