42564a93e0
Filename/tag search treated literal % and _ in query text as SQL wildcards; escape them (with ESCAPE '\') before building LIKE patterns. Also pass -- before the URL in curl invocations so a URL starting with a dash can't be misread as an option.