policy content length restriction