Twitter's new Gender thing doesn't enforce maxlength server-side, only client-side, so of course I did this.
If you don't know what that random-looking gibberish is: https://en.wikipedia.org/wiki/EICAR_test_file
Update: I blogged about it in case you want a longer explanation. https://soatok.blog/2020/04/27/why-server-side-input-validation-matters/