Path Traversal: Itemize encoding examples (OWASP#332)

makes it easier to read on webpage

pages/attacks/Path_Traversal.md

@@ -59,23 +59,24 @@ See the [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing
 
 Encoding and double encoding:
 
-`%2e%2e%2f` represents `../`
-`%2e%2e/` represents `../`
-`..%2f` represents `../ `
-`%2e%2e%5c` represents `..\`
-`%2e%2e\` represents `..\ `
-`..%5c` represents `..\ `
-`%252e%252e%255c` represents `..\ `
-`..%255c` represents `..\` 
+- `%2e%2e%2f` represents `../`
+- `%2e%2e/` represents `../`
+- `..%2f` represents `../ `
+- `%2e%2e%5c` represents `..\`
+- `%2e%2e\` represents `..\ `
+- `..%5c` represents `..\ `
+- `%252e%252e%255c` represents `..\ `
+- `..%255c` represents `..\` 
+
 and so on.
 
 #### Percent encoding (aka URL encoding)
 
 Note that web containers perform one level of decoding on percent
 encoded values from forms and URLs.
 
-`..%c0%af` represents `../ `
-`..%c1%9c` represents `..\ `
+- `..%c0%af` represents `../ `
+- `..%c1%9c` represents `..\ `
 
 #### OS specific