Allow escaping inside double quotes with a backslash (#447)

This commit is contained in:
Laurence Isla
2021-10-20 16:13:49 -05:00
committed by GitHub
parent 7e7d4df93b
commit 8e11b6f5df
2 changed files with 17 additions and 0 deletions
+8
View File
@@ -312,6 +312,14 @@ Here ``information.cpe`` is a column name.
GET /vulnerabilities?%22information.cpe%22=like.*MS* HTTP/1.1
If the value filtered by the ``in`` operator has a double quote (``"``), you can escape it using a backslash ``"\""``. A backslash itself can be used with a double backslash ``"\\"``.
Here ``Quote:"`` and ``Backslash:\`` are percent-encoded values. Note that ``%5C`` is the percent-encoded backslash.
.. code-block:: http
GET /marks?name=in.(%22Quote:%5C%22%22,%22Backslash:%5C%5C%22) HTTP/1.1
.. note::
Some HTTP libraries might encode URLs automatically(e.g. :code:`axios`). In these cases you should use double quotes
+9
View File
@@ -29,6 +29,15 @@ Added
-- `@laurenceisla <https://github.com/laurenceisla>`_
* Allow escaping inside double quotes with a backslash, e.g. ``?col=in.("Double\"Quote")``, ``?col=in.("Back\\slash")``. See :ref:`reserved-chars`.
|br| -- `@steve-chavez <https://github.com/steve-chavez>`_
* Documentation improvements
+ Added :ref:`nested_embedding` to the :ref:`resource_embedding` section.
Fixed
-----
* Fix using single double quotes (``"``) and backslashes (``/``) as values on the "in" operator
|br| -- `@steve-chavez <https://github.com/steve-chavez>`_