diff --git a/services/web/app/src/Features/Analytics/AnalyticsRouter.js b/services/web/app/src/Features/Analytics/AnalyticsRouter.js
index d24e95e1b2..06d2f5361a 100644
--- a/services/web/app/src/Features/Analytics/AnalyticsRouter.js
+++ b/services/web/app/src/Features/Analytics/AnalyticsRouter.js
@@ -4,7 +4,10 @@ const AnalyticsProxy = require('./AnalyticsProxy')
 
 module.exports = {
   apply(webRouter, privateApiRouter, publicApiRouter) {
-    webRouter.post('/event/:event', AnalyticsController.recordEvent)
+    webRouter.post(
+      '/event/:event([a-z0-9-_]+)',
+      AnalyticsController.recordEvent
+    )
 
     webRouter.put(
       '/editingSession/:projectId',