Constant MAX_CURSOR_LEN 

pub const MAX_CURSOR_LEN: usize = 2048; // 2_048usize

Upper bound on an accepted cursor’s length in characters. Cursors are attacker-controlled input; this bounds decode work before any parsing.