Comment 3 for bug 296739

You are passing raw query strings to Storm. If you make use of Storm's query building features, it will build correct queries for you.

If you really must pass raw query strings, it would be safest to assume that they will be escaped and double the percent signs.