PIN-4557: Safer mongodb regex filters

src/main/scala/it/pagopa/interop/tenantprocess/common/readmodel/ReadModelQuery.scala

@@ -1,5 +1,12 @@
 package it.pagopa.interop.tenantprocess.common.readmodel
 
+import org.mongodb.scala.bson.conversions.Bson
+import org.mongodb.scala.model.Filters
+
 trait ReadModelQuery {
   def mapToVarArgs[A, B](l: Seq[A])(f: Seq[A] => B): Option[B] = Option.when(l.nonEmpty)(f(l))
+
+  def escape(str: String): String = str.replaceAll("([.*+?^${}()|\\[\\]\\\\])", "\\\\$1")
+  def safeRegex(fieldName: String, pattern: String, options: String): Bson =
+    Filters.regex(fieldName, escape(pattern), options)
 }

src/main/scala/it/pagopa/interop/tenantprocess/common/readmodel/ReadModelTenantQueries.scala

@@ -222,7 +222,7 @@ object ReadModelTenantQueries extends ReadModelQuery {
 
   private def listTenantsFilters(name: Option[String]): Bson = {
     val nameFilter           = name match {
-      case Some(n) if n.nonEmpty => List(Filters.regex("data.name", n, "i"))
+      case Some(n) if n.nonEmpty => List(safeRegex("data.name", n, "i"))
       case _                     => Nil
     }
     val withSelfcareIdFilter = Filters.exists("data.selfcareId", true)