diff --git a/api.rst b/api.rst index 5826f7f45..e85864d60 100644 --- a/api.rst +++ b/api.rst @@ -312,6 +312,14 @@ Here ``information.cpe`` is a column name. GET /vulnerabilities?%22information.cpe%22=like.*MS* HTTP/1.1 +If the value filtered by the ``in`` operator has a double quote (``"``), you can escape it using a backslash ``"\""``. A backslash itself can be used with a double backslash ``"\\"``. + +Here ``Quote:"`` and ``Backslash:\`` are percent-encoded values. Note that ``%5C`` is the percent-encoded backslash. + +.. code-block:: http + + GET /marks?name=in.(%22Quote:%5C%22%22,%22Backslash:%5C%5C%22) HTTP/1.1 + .. note:: Some HTTP libraries might encode URLs automatically(e.g. :code:`axios`). In these cases you should use double quotes diff --git a/releases/upcoming.rst b/releases/upcoming.rst index a7ac4b116..9610ba27e 100644 --- a/releases/upcoming.rst +++ b/releases/upcoming.rst @@ -29,6 +29,15 @@ Added -- `@laurenceisla `_ +* Allow escaping inside double quotes with a backslash, e.g. ``?col=in.("Double\"Quote")``, ``?col=in.("Back\\slash")``. See :ref:`reserved-chars`. + |br| -- `@steve-chavez `_ + * Documentation improvements + Added :ref:`nested_embedding` to the :ref:`resource_embedding` section. + +Fixed +----- + +* Fix using single double quotes (``"``) and backslashes (``/``) as values on the "in" operator + |br| -- `@steve-chavez `_