Best way to whitelist http request

Yes seems the ? does need to be escaped as tested via Go Playground - The Go Programming Language

Since yaml is decoding you may need to escape 4 times \\\\? let me do some testing though

edit: can confirm double escape works