Skip to content

Bug: Text/Yara attributes that contain "$$" can't be searched for #10497

@security-intel

Description

@security-intel

Actual behavior

Creating a text or yara attribute whose value contains the sequence && succeeds, but searching by value fails in both the UI and the /attributes/restSearch API.
Example payload: {"value": "Hello &&", "type": "text"}

Expected behavior

Searching for the literal string "Hello &&" should return the attribute.

Steps to reproduce

Create any attribute containing "&&". Ex: {"value": "Hello &&","type":"text"}

Search for the attribute: Ex. {"value": "Hello &&","type":"text"}

Using only one "&" works. ex. "Hello &"

Version

2.4.195

Operating System

Ubuntu

Operating System version

20.04

PHP version

8?

Browser

Chrome

Browser version

No response

Relevant log output

Extra attachments

No response

Code of Conduct

  • I agree to follow this project's Code of Conduct

Metadata

Metadata

Assignees

Labels

T: potential bugType: potential bug. This issue may be a bugtopic: APIThis issue involves API usage

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions