Merge pull request #165 from UncoderIO/gis-8131

nazargesyk · web-flow · commit 50a0bbf95b1a · 2024-07-01T16:02:11.000+03:00
gis-8131 fix equal integer values render
diff --git a/uncoder-core/app/translator/platforms/palo_alto/renders/cortex_xsiam.py b/uncoder-core/app/translator/platforms/palo_alto/renders/cortex_xsiam.py
@@ -50,7 +50,6 @@
 }
 
 
-
 class CortexXQLFieldValueRender(BaseFieldValueRender):
     details: PlatformDetails = cortex_xql_query_details
     str_value_manager = cortex_xql_str_value_manager
@@ -72,7 +71,8 @@ def _wrap_str_value(value: str) -> str:
     def equal_modifier(self, field: str, value: DEFAULT_VALUE_TYPE) -> str:
         if isinstance(value, list):
             values = ", ".join(
-                f"{self._pre_process_value(field, v, value_type=ValueType.value, wrap_str=True)}" for v in value
+                f"{self._pre_process_value(field, str(v) if isinstance(v, int) else v, ValueType.value, True)}"
+                for v in value
             )
             return f"{field} in ({values})"
 
@@ -123,7 +123,11 @@ def startswith_modifier(self, field: str, value: DEFAULT_VALUE_TYPE) -> str:
     def regex_modifier(self, field: str, value: DEFAULT_VALUE_TYPE) -> str:
         if isinstance(value, list):
             return f"({self.or_token.join(self.regex_modifier(field=field, value=v) for v in value)})"
-        return f"{field} ~= {self._pre_process_value(field ,value, value_type=ValueType.regex_value, wrap_str=True)}"
+        value = self._pre_process_value(field, value, value_type=ValueType.regex_value, wrap_str=True)
+        if value.endswith('\\\\"'):
+            value = value[:-1] + "]" + value[-1:]
+            value = value[:-4] + "[" + value[-4:]
+        return f"{field} ~= {value}"
 
     def not_regex_modifier(self, field: str, value: DEFAULT_VALUE_TYPE) -> str:
         if isinstance(value, list):
