Server-side character limiting