Escape strings for regex query.

2010-09-16 14:37:18 +10:00 · 2010-09-16 14:37:18 +10:00 · b7e84031e3
commit b7e84031e3
parent d274576b47
1 changed files with 1 additions and 1 deletions
--- a/mongoengine/fields.py
+++ b/mongoengine/fields.py
@ -64,7 +64,7 @@ class StringField(BaseField):
                regex = r'%s$'
            elif op == 'exact':
                regex = r'^%s$'
-            value = re.compile(regex % value, flags)
+            value = re.compile(regex % re.escape(value), flags)
        return value