Well, yes, it does make an assumption that you would read further down in the doc to find out what %2$s might be about.
Pretty obviously it’s a valid thing to put in your whitelist, because it’s right there in the example.
It does not explain why you might want to put %2$s in your whitelist though, no.
If you haven’t read that part of the binding doc describing the actual use of parameter substitution, you are not likely to be using %2$s, so it wouldn’t really matter.
I am struggling to understand what this has all been about.
The new rule engine allows us to use any javax.script compatible scripting language. There is some outdated documentation here and newer documentation in the helper library repo. By using scripted automation with Jython, your rule scripts could be all Python. Hopefully soon, you’ll be able to set it up through the UI. Until then…