0.3.49

server/internal/api/analytics.go

@@ -210,6 +210,15 @@ func toRowEvent(payload rowEventPayload, userID string, now time.Time) (store.Ro
 	if payload.RowID == "" {
 		return store.RowEvent{}, false
 	}
+	// Row id, kind and item id are controlled vocabulary the television composes, never
+	// free text — so an event carrying anything else in them was misassembled, and a
+	// pathological value would distort the aggregates the console reads. Drop it whole,
+	// as the journey path does.
+	if !safeAnalyticsValue(payload.RowID, 100) ||
+		!safeAnalyticsValue(payload.RowKind, 40) ||
+		!safeAnalyticsValue(payload.ItemID, 100) {
+		return store.RowEvent{}, false
+	}
 	switch payload.Event {
 	case store.RowEventImpression, store.RowEventFocus, store.RowEventSelect:
 	default: