diff --git a/odoo/http.py b/odoo/http.py
index 0075b1bed34..5a8f6448956 100644
--- a/odoo/http.py
+++ b/odoo/http.py
@@ -1523,6 +1523,7 @@ def db_filter(dbs, httprequest=None):
     if d == "www" and r:
         d = r.partition('.')[0]
     if odoo.tools.config['dbfilter']:
+        d, h = re.escape(d), re.escape(h)
         r = odoo.tools.config['dbfilter'].replace('%h', h).replace('%d', d)
         dbs = [i for i in dbs if re.match(r, i)]
     elif odoo.tools.config['db_name']: