What
A large set of analytics call sites now run ids through a validator, bounding what can reach the analytics pipeline.
Details
- The validator allows only
[A-Za-z0-9_-]up to 128 characters and otherwise reports the literal "nonconforming". - Applied to background job ids and attach shorts,
session_idontengu_remote_attach_session,appearance_idon feedback/survey and transcript-share events,requestIdandpreviousMessageId, andtrigger_idswhich are now joined through the same validator. - Numeric fields such as
http_statusand bug-reportstatus_codemoved fromString(...)to the string-coercing sanitizer. - No user-visible behaviour change.
Evidence
nonconforming
Strings lifted out of the shipped bundle, so the claim above can be checked against them.