Substring "contains" match (attr=*text*): the value appears somewhere in the attribute.
attr=*text*
text is carried literally as a single any anchor, so it is injection-safe -- a * in text matches a literal asterisk, not an extra wildcard.
text
any
*
The attribute description.
The substring to look for (used verbatim).
A substrings Filter node with one any part.
substrings
1.0.2
contains('cn', 'smith'); // (cn=*smith*) Copy
contains('cn', 'smith'); // (cn=*smith*)
Substring "contains" match (
attr=*text*): the value appears somewhere in the attribute.textis carried literally as a singleanyanchor, so it is injection-safe -- a*intextmatches a literal asterisk, not an extra wildcard.