A colon punctuation mark in a search query results in 500

[rolinh]

Request Type

Bug

Work Environment

Question	Answer
OS version (server)	Ubuntu
TheHive version	2.12.1
Package Type	Binary

Problem Description

A colon (:) in a search query results in a 500 status code.

Steps to Reproduce

Perform a search query (from the search box on TheHive UI or via TheHive4py or curl the API or ...) which contains a colon (an ISO8601 formatted date is a perfect example: 2017-08-17T10:30:41Z but just : suffices) and see the result .

Complementary information

Excerpt from the logs:

Caused by: org.elasticsearch.common.io.stream.NotSerializableExceptionWrapper: parse_exception: Cannot parse ':': Encountered " ":" ": "" at line 1, column 0.
Was expecting one of:
    <NOT> ...
    "+" ...
    "-" ...
    <BAREOPER> ...
    "(" ...
    "*" ...
    <QUOTED> ...
    <TERM> ...
    <PREFIXTERM> ...
    <WILDTERM> ...
    <REGEXPTERM> ...
    "[" ...
    "{" ...
    <NUMBER> ...
    <TERM> ...
    "*" ...