Fix transform from Filter object to TAXII filter to look at
the filter operator; TAXII filters only support equals.pull/1/head
parent
e64d23d1dd
commit
659e1fd90d
|
@ -343,8 +343,8 @@ class TAXIICollectionSource(DataSource):
|
||||||
For instance - "?match[type]=indicator,sighting" can be in a
|
For instance - "?match[type]=indicator,sighting" can be in a
|
||||||
filter in any of these formats:
|
filter in any of these formats:
|
||||||
|
|
||||||
Filter("type", "<any op>", "indicator,sighting")
|
Filter("type", "=", "indicator,sighting")
|
||||||
Filter("type", "<any op>", ["indicator", "sighting"])
|
Filter("type", "=", ["indicator", "sighting"])
|
||||||
|
|
||||||
Args:
|
Args:
|
||||||
query (list): list of filters to extract which ones are TAXII
|
query (list): list of filters to extract which ones are TAXII
|
||||||
|
@ -357,7 +357,7 @@ class TAXIICollectionSource(DataSource):
|
||||||
taxii_filters = []
|
taxii_filters = []
|
||||||
|
|
||||||
for filter_ in query:
|
for filter_ in query:
|
||||||
if filter_.property in TAXII_FILTERS:
|
if filter_.property in TAXII_FILTERS and filter_.op == "=":
|
||||||
taxii_filters.append(filter_)
|
taxii_filters.append(filter_)
|
||||||
|
|
||||||
return taxii_filters
|
return taxii_filters
|
||||||
|
|
Loading…
Reference in New Issue