2 ms·

The bigger problem is that web browsers silently truncate strings over the maxlength. This behavior is particularly nasty for secure password fields.