Form <input> [forced] sanitizing + 256 maxlength (unless specified)